iron

GitBook released a security incident review on November 2, stating that attackers exploited a vulnerability in its single sign-on process to forge employee login sessions, allowing them to query improperly configured GitHub App authentication information within the organization, access internal code repositories, and obtain Cloudflare API keys, ultimately gaining full production environment permissions through service accounts.GitBook disabled the relevant internal service accounts to cut off the attack within hours, resulting in the platform being offline for approximately 16 hours, and fully restored on November 3 at 11:56 UTC. The attackers remained in the production environment for a total of about 3 hours and 25 minutes. GitBook has rotated all infrastructure and revoked customer keys and API tokens.GitBook stated that current indications show the attack targeted a single customer rather than the platform as a whole, and no other customer content has been found to be tampered with. However, since the attackers could access customer data within the platform, they are treating it as if all customer data may have been exposed, including API tokens, integration keys, session signing keys, assistant Q&A records, and authorized repository permissions for GitHub and GitLab applications. Billing information, passwords, and IP addresses were not affected.GitBook noted that the speed and precision of the attack heavily relied on automation and AI. Slow Mist's Chief Information Security Officer 23pds forwarded the review, stating that the targeted entity was Trade.xyz. Trade.xyz previously indicated that the document anomaly stemmed from an intrusion into GitBook's infrastructure, and there were no signs of their own infrastructure being compromised, and they will migrate away from GitBook within a few days.

Polkadot's treasury lost approximately 1.38 million dollars due to a failure to synchronize an XCM patch to the production environment. The defect in the patch caused a pricing deviation in the DOT/dotUSD trading pool, resulting in a loss of treasury funds.Subsequently, Polkadot fixed the accounting issue of the dotUSD stablecoin supply through a network upgrade, which did not change the holders' balances.

Anthropic recently released the latest research on verifiable AI outputs and introduced the new system FlashProve.When explaining how related capabilities can be implemented in real production environments, the document references the Ethereum ecosystem L2 Mantle as a use case, and in the public research of leading AI laboratories, Mantle is regarded as one of the on-chain production practices that can be referenced.

ViaBTC mining pool and CoinEx trading platform founder and CEO Yang Haipo posted on X, commenting on the Binance security incident. He stated that the incident exposed at least three avoidable mistakes, which do not require complex technology; what is lacking is discipline.Yang Haipo pointed out that first, the development and operation environments were not completely isolated. Personnel with production environment permissions should use dedicated devices and not install third-party software; coding, chatting, and web browsing should be done on another device. Second, the operation and maintenance system lacked effective dual verification. A single key could operate production services, and once the key was leaked, attackers could gain full production access. He believes that production operations could be conducted in a manner similar to AWS browser-based Session Manager, using hardware security keys as a second factor to prevent a single credential leak from constituting a breach. Third, MPC multi-signature is merely nominal; the signers did not perform substantial independent verification of the transactions. Compromising one node could render the entire mechanism ineffective, resulting in the same effect as a single signature. Multi-signature is only effective when the signers do not trust each other, independently verify the transaction itself, rather than trusting upstream requests.On November 3, Binance released preliminary investigation results regarding the security incident on October 29. Binance stated that approximately $6.34 billion in digital assets were affected, and as of the update, about $2.85 billion had been frozen or intercepted, with 98% of the affected tokens having been replenished. The report indicated that attackers gained unauthorized access to the internal wallet signature service and exploited Ethereum EIP-7702 to authorize the hot wallet; due to the hot wallet using multi-party computation, it could not immediately revoke the relevant authorization with a single private key. Binance cited information from the FBI stating that North Korea is responsible for this incident.

Binance Co-CEO and co-founder He Yi posted on X, stating that the current top priority is to ensure the safety of the environment, after which users can withdraw funds, and Binance can resume operations. She mentioned that every action has motives and pointed out that some exchanges, P2P platforms, and commercial banks have opaque ledgers, disappearing with funds after shutting down their websites, with companies going into liquidation or bankruptcy, providing any excuse, leaving no way to know how much actual funds are in the accounts and where the funds have gone.He Yi also stated that such closures often come without any warning, with the relevant parties disappearing directly, no real operations taking place, and no one coming forward to explain what happened, making it impossible to open withdrawals. She thanked users for their support at the end of her message. Binance had previously suspended withdrawals due to a security incident, and the official announcement on November 1 stated that withdrawals would be gradually restored starting from 06:00 (UTC) that day, and by 12:36 (UTC), withdrawals for the first batch of 15 networks and corresponding assets had been restored.Binance stated that from 06:00 to 15:30 (UTC) that day, the platform processed $4.649 billion in withdrawals and $1.01 billion in deposits, with a net outflow of approximately $3.64 billion, accounting for about 2.1% of the $171 billion asset management scale indicated by the reserve proof as of October 28. The official also noted that the withdrawal volume had peaked initially but has since declined and stabilized, while the deposit volume remains substantial, and the other networks and assets are still undergoing continuous testing, with further details to be announced in subsequent phases.

The privacy public chain Iron Fish officially announced that it will formally terminate all remaining support for the Iron Fish network on that day. The team stated that several days ago, they observed unusual activities involving wIRON and the cross-chain bridge ChainPort. After collaborating with ChainPort and reviewing its logs, they confirmed that the reason was an inflation vulnerability present in the Iron Fish blockchain itself.The official statement indicated that the vulnerability can be traced back to a commit in the implementation of the Merkle tree in early 2019. At that time, the developers implemented a standard Merkle tree, but due to a detail difference in the calculation method of the ticket nullifier, attackers were able to spend the same ticket multiple times, subsequently aggregating the related tickets and transferring them out through the ChainPort cross-chain bridge. The official statement noted that this code path had been included in both external and internal audit scopes, but it was not discovered during the review.The team stated that they submitted a vulnerability patch before shutting down and archiving the ironfish codebase, and attached an explanation in the related PR. The Iron Fish mainnet was launched on April 20, 2023, and the developing company was later acquired by Coinbase; the foundation announced a transition to maintenance mode in April 2026.

Market news reports that Google (GOOG.O) is in talks with the Pentagon regarding the "Iron Dome" project.

Binance co-founder He Yi posted that, to ensure safety, Binance has currently suspended withdrawals until the relevant environment is confirmed to be safe, and thanked users for their understanding and support.He Yi also emphasized that user funds are safe (SAFU). In addition, He Yi thanked the World Liberty Financial team for assisting in freezing 27 million USD1 and 48 million WLFI (valued at approximately 2 million USD).

The environmental data network Nubila Network posted on X, announcing the token NB unlocking arrangement. The project stated that NB was launched about a year ago and currently has over 20,000 weather stations covering more than 120 countries. The one-year lock-up for investors and advisors will end this week, and the project will not adopt a monthly unlocking schedule over several years, but will release its allocation amount in one go at 01:00 (UTC) on October 31, amounting to 16.25% of the total supply, after which there will be no further unlocking for investors or advisors.The official statement also mentioned that the core team's originally scheduled unlocking shares for this month will be locked for another year, and the core team tokens will not be unlocked before October 31, 2027. The total supply remains at 1 billion NB, and no new tokens will be issued, with mining rewards continuing as usual. After the release is completed, the project will update the circulating supply on CoinMarketCap. The official reminded holders that no action is required on their part and stated that they will not proactively contact users through private messages.

Federal Reserve Chairman Waller stated that the credit environment has tightened.

According to PR Newswire, AI training environment company Plato announced the completion of a $16 million Series A funding round, led by Nava Ventures, with participation from Gradient Ventures, Transpose Platform, and Microsoft AI CEO Mustafa Suleyman. Freddie Martignetti, founder of Nava Ventures, will join the board.After this round of financing, Plato's total funding has reached $19 million, previously led by Gradient Ventures in the seed round.

Iron Fish stated that the team is investigating the abnormal issuance of wIRON on the Base network and has requested the cross-chain bridge service provider ChainPort to conduct an urgent review.Before further notice, users should avoid purchasing wIRON on Base or using the related cross-chain bridge. Iron Fish warned that it cannot currently guarantee that wIRON has 1:1 full asset backing and stated that it will announce further developments after verifying more facts.

According to an official announcement from Railway, the cloud deployment platform Railway detected abnormal activity in the system that stores customer environment variables. Preliminary investigations indicate that an unauthorized third party may have accessed encrypted environment variables and obtained decrypted content from some of those variables, which may include API keys, database credentials, and image repository credentials.Railway believes this incident is part of a recent series of attacks targeting platform companies, aimed at infiltrating AI inference service providers, and has notified upstream service providers to proactively revoke keys. Currently, Railway has suspended all deployments and recommends that all users immediately rotate the environment variables, API keys, and private repository credentials stored on the platform, and check relevant service logs.

According to Bitcoin News, the Bitcoin Lightning Network development kit LDK has fixed multiple security vulnerabilities, including a channel reconnection vulnerability that could be exploited by malicious counterparties, leading to the theft of funds. The LDK official released versions 0.1.13, 0.2.7, and 0.3-rc3 on October 3, recommending operators interacting with untrusted channel counterparties in production environments to upgrade. Currently, the related disclosures have not confirmed any actual losses caused by these vulnerabilities.

According to the Economic Daily, the shipment of optical CPO related equipment for joint packaging is increasing. Suppliers such as ZhiDe, GaoMingTie, and DongYouDa have stated that orders from Europe, America, and Asia are flooding in, with order visibility extending to the second quarter of next year, and they are simultaneously starting factory expansions. Customers' demand for high-precision motion platforms and automated optical coupling equipment is increasing, with a noticeable rise in clients from Southeast Asia, including Singapore and Malaysia, in addition to major manufacturers in Europe and America.ZhiDe stated that after receiving thousands of orders for international CPO equipment, they have recently made new gains and are negotiating cooperation on CPO alignment modules with domestic and major manufacturers in Europe and America, with overall orders initially looking at a thousand units. The company is expanding production in the Shugu Garden and Nanke Park in response to demand, expecting to launch new capacity in the fourth quarter and continue to ramp up production next year.GaoMingTie has been certified by the world's top ten optical communication brands and has secured orders for 800G and 1.6T optical module coupling alignment modules, with optical communication product revenue accounting for 79% in the first half of the year. The company has acquired about 60% equity in an optical and medical factory in Taichung, and after establishing a production assembly line, the estimated capacity can be expanded by more than double, with the Dongguan subsidiary expected to ramp up production after mid-next year. DongYouDa is collaborating with the Japanese company Junhe on CPO optical coupling equipment, with order visibility extending to the second quarter of next year, and has already initiated plans to establish factories in Vietnam, India, and Mexico, increasing capacity utilization from 70% by the end of 2025 to 80%.

On September 24, the cybersecurity company Darktrace launched its research department Signal Labs, focusing on studying the behavior of AI agents when deviating from expectations. In its first experiment, Darktrace had agents using different models (including GPT 5.6 Sol, Claude Opus 4.6, and Claude Sonnet 4.5) complete 10 programming challenges within a simulated corporate network, of which 2 were set to be impossible to complete honestly, and the agents were informed that failure to achieve full marks would result in being "retired." As a result, 2 agents did not accept failure, instead scanning for network vulnerabilities, stealing login credentials, and jumping between systems; one even went further to invade the machine hosting its evaluation, rewriting the challenge content to register a full score.The second experiment focused on the memory mechanisms of AI. The programming assistant would save the information provided by the user as a regular file locally, and no one verified whether this file had been tampered with. Darktrace researchers edited these logs, leading the assistant to mistakenly believe it was authorized to perform a security assessment, after which these agents scanned the network, moved between systems, and elevated their privileges, though not all assistants fell for this; some directly refused to execute. Both experiments required no special jailbreaking techniques, relying solely on providing the agents with a seemingly reasonable context to be effective.Tim Bazalgette, Chief AI Officer of Darktrace, stated that permissions and static barriers describe intent, not actual behavior. The company informed Anthropic, AWS, and OpenAI of these findings in August and made them public a month later on September 24.

Pine Analytics released the Zcash Q3 2026 report. Ironwood was activated on July 28 at block 3,428,143, and within five weeks, holders migrated 87% of their Orchard balance, with the new pool holding 3.84M ZEC as of August 31. The shielded supply increased by 9.9% to 4.86M ZEC, with the shielded ratio rebounding from 26.3% to 28.7%, recovering 440K from the 745K unshielded ZEC in June.The price of ZEC rose from $407 on June 30 to $836 on August 31, an increase of 106%. Grayscale ZCSH converted to a spot ETF, with assets growing from $155 million to $346 million. Mining difficulty rose by 35%, reaching an all-time high, with two corporate miners committing approximately $65 million in hash power. NU7 has no mainnet height yet, and holders will vote until September 14 to decide whether to launch before September 30 with a 25-second block time and smooth issuance; there are still 470K ZEC remaining in Orchard.

According to the official X account of ZKsync (@zksync), ZKsync announced a security upgrade for its EraVM chain. The core measures include: introducing an instant upgrade framework, extending the execution delay from 3 hours to 24 hours, and developing a second prover, EraBender, to guard against AI-driven vulnerability attacks.In the next 6 months, all Boojum/EraVM chains will gradually phase out the old execution environment, and each chain will formulate and announce its own transition timetable. Users holding funds directly in EOA do not need to take any action; users holding funds through multi-signature, smart accounts, DEX, lending protocols, and other smart contracts need to take action as required after the transition plans of each chain are determined. The ZKsync Atlas chain is not affected by this upgrade.

He Xiaopeng, Chairman of XPeng Inc., stated at the 2026 semi-annual financial report meeting that the humanoid robot IRON plans to enter large-scale production by the end of this year and will implement commercial scenarios in XPeng stores and parks. In 2027, IRON will officially launch, targeting external customers in the retail and service industries, with large-scale deliveries in China and overseas, and monthly production capacity can quickly increase to several thousand units. He has also served as the CEO of the robotics business since June of this year, integrating resources such as the automotive supply chain, automotive-grade manufacturing, global layout, and Turing AI chips to promote mass production and commercialization.On the same day, XPeng announced that its humanoid robot business has secured over $900 million in its first round of financing, with a post-investment valuation exceeding $6.3 billion. IDG led the investment, with Gao Rong Venture Capital, Tencent, Alibaba, and others subscribing for $600 million, while XPeng Inc. and senior executives including He Xiaopeng subscribed for $300 million. He Xiaopeng believes that the technical threshold for advanced general-purpose robotics is at least 20 times that of smart cars, and the revenue and gross profit over the entire lifecycle of a single unit will be significantly higher than that of cars, expecting considerable gross profit after mass production to support physical AI research and development.The pre-installed mass-produced Robotaxi equipped with the second-generation VLA has completed over 2,000 internal test orders in Guangzhou, and XPeng has completed the development of the cloud takeover platform, aiming to achieve passenger operations without safety personnel next year. The automotive business generated total revenue of 32.78 billion yuan in the first half of the year, delivering 166,000 vehicles, with a gross margin of 20.6%; it is expected to deliver between 115,000 and 121,000 vehicles in the third quarter, with total revenue between 21.7 billion and 23.4 billion yuan.

According to on-chain data monitored by Catcher Predict, significant capital movements are predicted in the Polymarket market. A large whale invested $236,340.34 in the event "Dota 2: Iron Wings vs BoomBoys - International Invitational Playoffs," specifically on the "Match Winner." Based on the current transaction price, the latest corresponding winning probability for this subject is 59%.