BTC $71,364.17 -4.31%
ETH $2,012.73 -3.11%
BNB $653.89 -4.69%
XRP $1.03 -2.85%
SOL $81.16 -4.43%
TRX $0.3154 -0.67%
DOGE $0.0657 -4.12%
ADA $0.1724 -2.87%
BCH $225.47 -2.58%
LINK $10.02 -3.59%
HYPE $71.73 -1.86%
AAVE $114.17 -7.27%
SUI $0.8011 -4.42%
XLM $0.1484 -1.03%
ZEC $949.95 -4.98%
AAPL $355.09 -0.09%
AMZN $267.62 +0.53%
GOOGL $299.24 +1.95%
MSFT $523.23 +0.55%
META $624.60 -0.95%
NVDA $166.39 -4.47%
TSLA $398.01 +1.79%
SNDK $942.00 -4.26%
INTC $61.46 -1.70%
SPCX $140.24 +0.09%
MU $805.43 -1.02%
AMD $586.13 +5.81%
BTC $71,364.17 -4.31%
ETH $2,012.73 -3.11%
BNB $653.89 -4.69%
XRP $1.03 -2.85%
SOL $81.16 -4.43%
TRX $0.3154 -0.67%
DOGE $0.0657 -4.12%
ADA $0.1724 -2.87%
BCH $225.47 -2.58%
LINK $10.02 -3.59%
HYPE $71.73 -1.86%
AAVE $114.17 -7.27%
SUI $0.8011 -4.42%
XLM $0.1484 -1.03%
ZEC $949.95 -4.98%
AAPL $355.09 -0.09%
AMZN $267.62 +0.53%
GOOGL $299.24 +1.95%
MSFT $523.23 +0.55%
META $624.60 -0.95%
NVDA $166.39 -4.47%
TSLA $398.01 +1.79%
SNDK $942.00 -4.26%
INTC $61.46 -1.70%
SPCX $140.24 +0.09%
MU $805.43 -1.02%
AMD $586.13 +5.81%

dri

All
Article
Flash

Chainstack disclosed that it suffered an AI-driven cyber attack at the end of October, resulting in the exposure of customer account information

Blockchain infrastructure service provider Chainstack disclosed that it experienced an AI-driven cyber attack from October 26 to 31, 2026. The attacker accessed the development environment through an unmodified default administrator credential and a Grafana instance without single sign-on protection, subsequently gaining cluster administrator privileges via an unauthenticated MCP tool server and stealing credentials through an automated platform, ultimately accessing the production environment to read the customer database.This incident resulted in the exposure of customer account information, including organization names, account holder names, member email addresses, and password hashes. The attacker also had access to systems containing node credentials, although there is no evidence that they were read; however, Chainstack still urged customers to rotate their node credentials. Chainstack stated that customer-facing services operated normally during the incident, and customer nodes, consoles, and APIs were not modified. Investigations revealed that the attacker used the open-source framework ARTEX, with no evidence found of exploiting software vulnerabilities. Chainstack has cut off the attack access path and requested customers to change passwords, rotate node credentials, regenerate platform API keys, and remain vigilant against phishing information.

Trip promotes the DRI system across the company to implement a major integration of production and research, breaking down functional boundaries

According to exclusive reports from Big Factory Daily, Trip.com held an all-hands meeting last week to announce the promotion of the "Integration of Production and Research" system across the company. This system is centered around DRI (Directly Responsible Individual) and merges personnel from product, operations, front-end, back-end, algorithms, testing, and other areas into project-based teams, breaking down traditional functional team boundaries with the goal of achieving "everyone is a full-stack developer, everyone is a product manager."In terms of specific execution, DRI leaders are not limited by function and can be original product, operations, or technical leaders. Team members within the project group collaborate across functions, which may lead to situations where products evaluate technical performance, and technology reports to operations. Front-end and back-end teams can also propose requirements and implement them independently. Ideas from product and operations that can be realized by AI can also be delivered independently, ultimately decided by the DRI.Currently, departments such as Trip.com Travel, Flights, and Content Center have begun to respond, with different teams progressing at varying paces, and the company has not imposed a one-size-fits-all requirement. The report indicates that this move is partly influenced by Silicon Valley concepts and aligns with the trend of blurred job boundaries in the AI era. This model can effectively reduce buck-passing and disputes, shorten delivery chains, and accelerate decision-making, but the challenge lies in the high comprehensive ability requirements for DRI leaders, who need to possess both technical understanding and business insight, and such qualified leaders are currently relatively scarce.

BlackRock has recorded a $3.6 billion IBIT physical conversion: security considerations have become the main driver

According to Barron's, Robbie Mitchnick, head of BlackRock's digital asset business, stated that since regulators approved the physical creation and redemption of crypto assets last year, the company has recorded approximately $3.6 billion in physical conversions of directly held Bitcoin into shares of its spot Bitcoin ETF, IBIT. Since BlackRock does not handle all transactions itself and may not see every conversion, the actual scale may be larger.BlackRock also provides physical conversions for the iShares Ethereum Trust ETF and the iShares Staked Ethereum Trust ETF, but the related scale is much smaller than IBIT. Mitchnick noted that demand continues to rise, and this is currently the highest level of interest the company has seen, which does not change with Bitcoin price fluctuations. The primary motivation is security and peace of mind. Outsourcing custody to an institutional-grade cold storage model is more attractive for holders; holding ETF shares managed by large fund managers is generally seen as less risky than placing assets on crypto trading platforms or in always-online hot wallets.He mentioned that the recent hacking incident at Binance has once again highlighted the risks of trading platforms, although large Bitcoin holders have long understood these risks. The minimum threshold for physical conversions has been reduced from the initial approximately $30 million to about $1 million to $2 million, with the threshold set by intermediary firms facilitating the transactions, such as Galaxy Digital, Talos, and Virtu. Mitchnick expressed hope that the threshold could be lowered to a single ETF share, but the cost structure is unlikely to drop to zero in the short term.

Zhao Changpeng: It is expected that the bull market will drive more capital inflow, and retail investors are advised to actively learn about asset security protection

Binance founder Changpeng Zhao stated in an interview, "Typically, after an attack event, some users do choose to withdraw their funds. Some large institutions are required by internal policies to withdraw funds, and some retail investors may follow suit.However, after withdrawing, users face another question: where is it safer to store their money? I personally have not suffered any financial losses on Binance because Binance has absorbed the losses caused by this incident. This event is indeed frightening, but the question is, where can I transfer my funds? Recently, several hardware wallets have also been attacked, including one supply chain attack and another involving the mnemonic phrase generation process. This means that even if users make no operational mistakes and strictly follow all security protocols, purchasing hardware wallets and generating mnemonic phrases, they could still lose all their funds five years later without any fault, and no institution will bear the losses.The first wave of impact has already occurred, and Binance has also been attacked and completed repairs. Next, the second wave of impact may affect smaller platforms, which may not necessarily be more secure. Therefore, some users may initially choose to withdraw, but later realize that they need to manage their mnemonic phrases and store their assets themselves. In fact, less than 10% of the funds flowed to other centralized trading platforms, which means that most of the funds may have been transferred to users' own self-custody wallets. However, using self-custody wallets is not without risks. Users must properly back up their mnemonic phrases and ensure they do not get lost or damaged.In fact, most losses suffered by users when self-custodying assets are not even caused by hacker attacks. Therefore, after weighing their options, users may reconsider depositing their funds back into trading platforms. In fact, within less than 24 hours, we have already seen a change in fund flows. I also saw a tweet earlier showing that the fund flow statistics for the platform have turned into a net inflow on an hourly basis, which actually reflects the strength of the platform and users' trust in it. I believe that in the coming weeks and even months, fund flows will continue to fluctuate. As we mentioned before, if the market re-enters a bull market, we will see more funds flowing in.I believe there are many aspects that need attention. First, the speed of technological development is very fast, especially AI, which is growing at an astonishing rate, and the trend of exponential growth even exceeds people's understanding. Secondly, I believe that the entire cryptocurrency industry is still under-invested in the security field. Frankly speaking, many AI security tools are not yet truly applied in the industry.Therefore, I encourage all practitioners to increase their investment in these areas, including increasing the number of security engineers, introducing more AI tools, and closely collaborating with AI security service providers. I believe these are crucial. For ordinary users, what we call retail investors, I suggest everyone actively learn about different security tools, understand how to protect their assets, and closely follow industry trends and relevant news. Especially at this current stage, all of this is very important."
app_icon
ChainCatcher Building the Web3 world with innovations.