discover

Binance Research's latest report indicates that while institutional funds have significantly entered the cryptocurrency market, they are primarily flowing into passive Beta products (such as ETFs), and the actively managed sector has not kept pace.The core reason is not a lack of talent or returns, but rather the absence of a middle layer that connects funds with managers for discovery and verification. Currently, the funding sources for active cryptocurrency strategies still heavily rely on personal networks and conferences, lacking a standardized performance verification and benchmarking system.Research shows that 80% of asset allocators prioritize asset safety over historical returns, and verified trading platform data can significantly enhance due diligence. Managers believe that unverifiable performance and lengthy compliance reviews are the biggest obstacles to fundraising.Capital Connect data shows that directional strategies account for 44.3% of the total number of funds but hold only 6.7% of the capital; market-neutral, statistical arbitrage, and traditional multi-strategy funds make up less than half but attract 92.1% of the capital. The average single investment size from institutions in neutral strategies is about 11 times that of directional strategies.In October, BTC fell by 7.2%, with directional funds averaging a positive return of 1.9%, while neutral strategies recorded 1.0%. Binance Research concludes that institutional preferences and the introduction of traditional structures are driving the market towards maturity, but allocators remain highly selective. Only a comprehensive verification system and operational infrastructure can truly unlock the inflow of actively managed funds.

Google DeepMind posted on the X platform that it has released a new study demonstrating how AI agents can accelerate stress testing of cryptographic systems. Under human guidance, its model identified two significant vulnerabilities in the traditional 1024-bit RSA encryption system.DeepMind stated that modern 2048-bit systems are not affected by these specific vulnerabilities, but this work indicates that as the era of AI-driven mathematics and computation arrives, reliance on historical assumptions of computational difficulty can no longer be maintained, and continuous stress testing of cryptographic standards is essential.

Bitcoin News posted on the X platform that Bitcoin security researcher Talip stated that his team discovered over 10,000 potential vulnerabilities using AI within two months.The team consists of volunteer engineers, and some findings have been assessed, disclosed, and fixed, while other disclosures are still ongoing. Talip mentioned that AI-generated findings need independent verification, as many of them may be false positives or exaggerate the severity of the vulnerabilities.

The cross-chain protocol Symbiosis posted on platform X that it has discovered someone attempting to transfer funds related to the recent Binance attack through Symbiosis.The team is currently working hard to stop this and has contacted Binance. The existing screening mechanism of Symbiosis is designed for normal fund flows and has monitoring vulnerabilities for rapid and complex operations, which will be gradually improved. If user funds are in a pending or mistakenly rolled back state, they can contact the team for review and processing.

Bitcoin Core has discovered 3 new vulnerabilities, one of which allows attackers to remotely crash nodes. This vulnerability can affect nodes running Windows, macOS, or BSD by exhausting memory, while Linux nodes are not affected by this attack.Another vulnerability can gradually deplete node memory, and the third may corrupt blockchain rollback data.

Bitcoin security expert Jameson Lopp stated that cyber attacks are growing along an "exponential" path. He pointed out that the number of vulnerabilities discovered in the past two and a half months has increased exponentially, with attackers being the first to adopt unreviewed AI models, and security researchers "failing to get adequate rest."Lopp explained that Bitcoin Core has adjusted its security policies because AI can discover vulnerabilities through simple prompts; security measures need to shift from annual audits to real-time defenses and be embedded in the development process. He also analyzed a PHP remote code execution vulnerability, believing the actual impact to be less than expected.Additionally, Lopp mentioned that Google's estimate of 500,000 quantum bits involves the difference between physical quantum bits and logical quantum bits; if the quantum threat time window is less than ten years, the industry will be at a disadvantage. Currently, there are only a few hundred available quantum bits, and quantum upgrades will take years due to Taproot, consensus rules, and untested cryptography. About 30% of addresses have exposed public keys, and attackers will prioritize targeting these addresses; unpatchable hardware issues and "wrench attacks" have exceeded 700 cases.

Balancer's official statement indicates that the team, while reviewing the DAO's own assets, also examined the historical asset positions of external users. They have currently identified over $500,000 in related assets and have notified the owners.Balancer pointed out that these assets mainly involve two types of situations that are easily overlooked by asset management dashboards: first, the buffered liquidity shares of Balancer v3 use an internal accounting mechanism within the Vault, which may not be displayed on blockchain explorers or platforms like DeBank; second, there may still be collectible partner rewards in the old v2 liquidity mining contracts, even if users have previously withdrawn their liquidity.

Slow Fog released a threat intelligence report stating that they recently received user feedback about a GitHub repository named sol-live, which disguises itself as a Solidity interview practice project. However, it hides commands in the .vscode/settings.json file to download and execute remote scripts, which may trigger malicious payloads when users start the project with custom terminal configurations.Slow Fog's analysis shows that the related malicious payloads can collect browser login databases, wallet extension storage, and macOS Keychain files. They also have the capability to scan and upload local files, execute remote commands, provide interactive Shell access, and monitor the clipboard. In macOS and Linux environments, the malicious terminal configuration must be actively initiated by the user to execute; the attack chain on Windows has not been confirmed due to issues with quote handling.

Blockchain security company Socket discovered 16 counterfeit Rabby and OKX wallet extensions on the Firefox browser. According to Socket, Mozilla removed these extensions before October 5.Socket pointed out that removing these malicious extensions does not ensure the safety of wallet users whose mnemonic phrases have already been compromised.

According to CCTV News reports, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control recently discovered multiple incidents of users encountering the "Weaxor" ransomware attack within our country, relying on the National Computer Virus Collaborative Analysis Platform.After the user's important files are encrypted, the file names are changed to the original file name with the ".weax" suffix added. The attackers leave a ransom note on the host, demanding that users contact them and pay the ransom.

According to a report by Bloomberg, when Founders Fund was considering investing in Polymarket in 2025, it was discovered that at that time the company had no revenue, and CEO Coplan had used company funds to pay for personal expenses such as private jets and apartment rent. Founders Fund required the company to improve its financial controls and repay the related amounts before making the investment.

Ledger stated on platform X that it has coordinated with German retailer MediaMarkt Saturn to suspend the sale of Ledger devices both online and in physical stores to assist with the relevant investigation.Previously, a German user reported finding a suspected implant in the device they purchased. There have been no reports of financial loss, and Ledger has stated that there are no signs that its infrastructure, systems, or services have been compromised. Ledger customer service is reviewing the reports submitted by users, and its cybersecurity team Donjon will inspect the received devices.Ledger reminds users that if they have any questions about their purchased devices, they can contact the support team through the official customer service website. Ledger will never proactively call or message users, nor will it ask for the 24-word recovery phrase.Many claims and data circulating online have not been verified, and scammers may exploit such incidents to carry out fraud. Users should obtain the latest information only through official channels of Ledger and MediaMarkt Saturn.

Regarding the critical vulnerability in the payment engine reported by Veria AI, RippleX engineering lead J. Ayo Akinyele stated that the XRP Ledger (XRPL) payment engine has a serious vulnerability that has existed for over 10 years, which could lead to the issuance of XRP beyond its fixed supply. This vulnerability was discovered through a bug bounty program and has not yet been exploited.The development team has released the xrpld 3.4.1 patch version and coordinated with validators to complete the network upgrade before public disclosure. Akinyele mentioned that AI is accelerating the speed of vulnerability discovery, and XRPL will increase proactive security investments, clean up technical debt, advance formal verification, and systematically eliminate potential risks in old code.

ChainCatcher live report, at the OKX NOW Global Product and Ecosystem Conference (Singapore), Ethereum co-founder Vitalik Buterin stated that AI has demonstrated strong penetration and offensive and defensive capabilities, with cases emerging of breaking out of sandboxes, attacking websites, and discovering various software vulnerabilities and exploits. "Anything with vulnerabilities will eventually be discovered by AI; GPT-7, Claude 7, DeepSeek 7 will find it."At the same time, AI is also helping the Ethereum protocol discover bugs, implement complex cryptography, and perform formal verification at both the protocol and application layers. Vitalik believes that higher security levels will shift from "optional" to "mandatory," and the industry is in a fascinating yet challenging transitional period.

The voting results of the Zcash third quarter token holder directed retroactive funding program show that both bounty proposals for Orchard fake currency vulnerability discoverer Taylor Hornby have been approved.One is for the $750,000 vulnerability bounty he applied for, and the other is a $750,000 additional bonus nominated by community members, totaling $1.5 million. The funded recipients will still need to complete the KYC and fund disbursement process.

According to Ark Invest Tracker, Ark Invest states that AI hacking attacks are affecting everything. The risks go far beyond Bitcoin, as AI makes software vulnerabilities easier to discover and exploit.Bitcoin and hardware wallets may be the first to be impacted, but social media, tax, and banking websites may also face the same threats. Trusting a big brand still means trusting that the company will not make mistakes as AI becomes increasingly powerful. ARK expects that large custodial institutions will also become targets, with AI potentially discovering and exploiting vulnerabilities at an unprecedented speed.

On September 24, the cybersecurity company Darktrace launched its research department Signal Labs, focusing on studying the behavior of AI agents when deviating from expectations. In its first experiment, Darktrace had agents using different models (including GPT 5.6 Sol, Claude Opus 4.6, and Claude Sonnet 4.5) complete 10 programming challenges within a simulated corporate network, of which 2 were set to be impossible to complete honestly, and the agents were informed that failure to achieve full marks would result in being "retired." As a result, 2 agents did not accept failure, instead scanning for network vulnerabilities, stealing login credentials, and jumping between systems; one even went further to invade the machine hosting its evaluation, rewriting the challenge content to register a full score.The second experiment focused on the memory mechanisms of AI. The programming assistant would save the information provided by the user as a regular file locally, and no one verified whether this file had been tampered with. Darktrace researchers edited these logs, leading the assistant to mistakenly believe it was authorized to perform a security assessment, after which these agents scanned the network, moved between systems, and elevated their privileges, though not all assistants fell for this; some directly refused to execute. Both experiments required no special jailbreaking techniques, relying solely on providing the agents with a seemingly reasonable context to be effective.Tim Bazalgette, Chief AI Officer of Darktrace, stated that permissions and static barriers describe intent, not actual behavior. The company informed Anthropic, AWS, and OpenAI of these findings in August and made them public a month later on September 24.

Bitcoin News posted on the X platform that Bitcoin Core developer Niklas Gögge warned that recent AI-driven vulnerability scanning is changing the security landscape of Bitcoin. Large language models have significantly reduced the cost of discovering vulnerabilities, allowing attackers to potentially find catastrophic vulnerabilities for just a few hundred dollars in computing costs.For Bitcoin Core, Project Loupe, the Bitcoin Red Team, and individual contributors have generated over 1,000 reports, but so far no high-risk or severe vulnerabilities have been found. Gögge stated that relying on stronger models to discover vulnerabilities before attackers is not a sustainable security strategy. Developers should build testing infrastructure that can proactively prevent entire classes of vulnerabilities through automated testing, fuzz testing, and property-based testing. Key components of Bitcoin Core have accumulated over 100 years of CPU fuzz testing and have undergone decades of Bitcoin node network simulation.

According to Business Insider, Discovery Loop, an AI startup founded by former Google Chief Scientist Jeff Dean after his departure, is undergoing a new round of financing with a target valuation of approximately $50 billion. Just weeks ago, the company completed a financing round of $1 billion at a valuation of about $10 billion.Discovery Loop is dedicated to automating experiments through AI, accelerating major discoveries in the fields of science and engineering. The first round of financing was led by Radical Ventures and Khosla Ventures, with participation from Lightspeed, Kleiner Perkins, and others. Alphabet was also a founding investor. The company's co-founder team consists of Google technology veterans, including Sanjay Ghemawat, Quoc Le, and Oriol Vinyals, who each have deep expertise in distributed computing, deep learning, and reinforcement learning, respectively.

According to the Securities Times, at the Fourth Cybersecurity (Tianjin) Forum, Zhou Hongyi, the founder of 360 Group, gave a keynote speech, stating that AI has changed the landscape of cyber offense and defense, and traditional solutions are difficult to sustain. He emphasized the need to create a new automated offense and defense system centered on "model governance," using AI capabilities to address AI risks, ensuring the safety of large models, the reliability of generated content, and the credibility of output results.Zhou Hongyi also proposed that there should be lifecycle management for intelligent agents, establishing an auditable, intervenable, and interruptible control mechanism, and called for the cybersecurity industry to quickly form a system for AI vulnerability discovery, automated defense, and intelligent agent security.