user

Bitget announced the launch of a new Bitget AI landing page, further showcasing its product layout for the AI trading ecosystem. Data shows that the number of users in the Bitget AI ecosystem has surpassed 1 million, with a cumulative trading volume of 1.2 billion USD, and it has supported over 58 trading tools, covering core scenarios such as market analysis, trading assistance, strategy building, and automated workflows.Under the UEX multi-asset trading framework, Bitget AI has become a key layout for the platform to deeply embed intelligent systems into trading scenarios, and it is an important step towards evolving into a native intelligent agent exchange. The core products of this ecosystem include the no-install AI agent GetClaw, which provides real-time market insights; the AI assistant GetAgent, used for strategy execution and automated trading; and the developer platform Agent Hub, which offers open API interfaces and model integration capabilities. Together, these three components build a complete closed-loop process of "insight---strategy---execution," providing users with seamless intelligent trading services.Bitget CEO Gracy Chen revealed that the next phase will gradually introduce new features, including the AI Trading Playbooks currently in internal testing, to enhance the integrated AI trading infrastructure from strategy creation, backtesting, deployment to distribution.

The slow fog余弦 social media stated that the high-risk iOS attack framework DarkSword has been publicly leaked on channels such as GitHub and is being used for large-scale espionage attacks targeting cryptocurrency wallet holders.This attack program targets devices running iOS versions 18.4 to 18.7, utilizing vulnerabilities in the Safari browser through malicious web pages to achieve remote code execution, thereby stealing users' sensitive data. Attackers launch attacks using bait web pages that impersonate pornographic live streams, Tron energy stations, refund processes, and more.iPhone users running older versions of iOS, once they access such web pages using the Safari browser (even if they do not close the page), may have sensitive information such as plaintext private keys and mnemonic phrases stolen by malicious JavaScript code when unlocking the wallet app, which is then transmitted in real-time through channels like Telegram bots.

Coinbase announced that it has added support for the BTC-INR trading pair for Indian users. BTC-INR will first launch on Coinbase Exchange and will gradually expand to Coinbase.com, Coinbase App, and Coinbase Advanced.

According to a report by Cai Lian She, OpenAI released a statement regarding the recent "Mini Shai-Hulud" supply chain attack incident targeting the popular open-source library TanStack. After monitoring the malicious attacks on several commonly used npm packages, the security team quickly investigated the internal systems and found no evidence of user data being leaked or accessed illegally.OpenAI pointed out that although its core services were not directly compromised, to ensure the security of local environments, all macOS users using its official applications must complete software updates by June 12, 2026.

According to official news, Binance Wallet will distribute the Binance Alpha airdrop and open trading today at 17:00 (UTC+8).Users with at least 225 points of Binance Alpha can claim tokens on a first-come, first-served basis until the airdrop pool is fully distributed or the airdrop event ends. More details will be announced soon.

GoPlus Security stated that a user fell victim to a typical address poisoning attack, mistakenly transferring 100,000 DAI to a fake address created by the attacker after copying a similar address from the transaction history.In this incident, the user had previously transferred 300,000 DAI to the target address, and the attacker subsequently sent 0.0003 DAI from a similarly structured address to lure the user into mistakenly selecting the wrong address for the second transfer.GoPlus Security reminds users not to copy addresses from transaction history, to verify the complete address before transferring, and to conduct a small test transfer before making large transactions.

The TAC team announced that its cross-chain layer's TON side was exploited by external attackers, resulting in a loss of approximately $2.8 million, involving USDT, BLUM, and tsTON. TAC, TON, and all ERC-20 tokens bridged from Ethereum are unaffected. The bridging service remains suspended, and forensic analysis and repair work are ongoing. A complete report with more details will be released within the next 48 hours.The team is actively collaborating with law enforcement, SEAL 911, and security partners to track and freeze the stolen funds. The team stated that its core focus is to sell the foundation's TAC token reserves in a legally structured manner to compensate for user losses and fully restore bridging liquidity. Official channels will continue to update progress.

According to official news, Binance Alpha has now launched Pharos (PHAROS).Users holding at least 200 Binance Alpha points can claim an airdrop of 45 PHAROS tokens on the Alpha event page, following a first-come, first-served mechanism. If the event has not ended, the points threshold will automatically decrease by 5 points every 5 minutes.In addition, claiming the airdrop will consume 15 Binance Alpha points, and users must complete the confirmation within 24 hours, otherwise it will be considered a forfeiture of the claim.

According to a notice from Transit Finance, a security incident recently occurred in the project due to historical vulnerabilities in an old version of the smart contract deployed on TRON, which was deprecated in 2022, affecting a small number of users after being exploited.The team stated that after discovering the issue, they urgently completed investigation, isolation, and repair, and on May 12, further auditing and rectification were carried out. The currently used contract version has not been affected, has been running safely for over four years, and continues to undergo security audits and monitoring.Transit stated that affected users will receive full compensation, and specific plans will be announced through official channels. They also reminded users to be wary of counterfeit official messages and not to disclose private keys or mnemonic phrases.

According to The Block, Coinbase has expanded its on-chain loan products supported by cryptocurrency, adding support for Solana, allowing users to collateralize SOL to borrow up to $100,000.The loans are provided through the Morpho integration on Base, similar to collateralized loan products for Bitcoin, Ethereum, and others. A company spokesperson revealed that since its launch last year, Coinbase's total issuance of cryptocurrency collateralized loans has exceeded $2.3 billion, with Bitcoin collateralized loans accounting for $2.17 billion and Ethereum approximately $110 million.

Coinbase has expanded its on-chain crypto lending product, adding support for Solana (SOL), allowing users to borrow up to $100,000 by collateralizing SOL. This lending service is based on the integration of Coinbase with the DeFi lending protocol Morpho on the Base network, which previously supported collateralized lending for crypto assets like BTC and ETH.Ben Shen, Head of Financial Services and Loyalty Products at Coinbase, stated that the addition of SOL collateral is an important step for Coinbase to become "the best platform for trading and holding Solana," and reflects its strategy to build an "Everything Exchange." Data shows that since the launch of this crypto lending product last year, Coinbase's cumulative loan issuance has exceeded $2.3 billion. Among these, Bitcoin remains the primary collateral asset, with a cumulative loan amount of $2.17 billion; ETH collateralized loans are about $110 million, and XRP is $31.6 million, followed by assets like cbETH, DOGE, ADA, and LTC.Last month, Coinbase also expanded this lending business to the UK market, continuing to advance its on-chain financial services layout. Although Coinbase announced a net loss of $394.1 million in the first quarter last week and laid off about 14% of its workforce, CEO Brian Armstrong still stated that in the future "all finance will migrate on-chain," and Coinbase is positioning itself around this trend. Several institutions, including Bernstein, Benchmark, and Rosenblatt, have recently maintained a "buy" rating on Coinbase stock, with Bernstein believing that Coinbase is gradually validating the feasibility of its "Everything Exchange" strategy.

The BAI platform announced user data for May 11, showing that the platform gained 8,756 new users that day. While maintaining strong growth, the proportion of Stripe payments among the core paying group has risen to 69.0%, indicating a steady improvement in retention rates among traditional developers and production-level users. In terms of business structure, the DeepSeek-V4 series has contributed nearly 60% of Token consumption due to its extreme cost advantages. This series of models, with ultra-low latency, high concurrency, and high throughput capabilities, is becoming an indispensable core execution engine in the AI Agent era. The B.AI platform will continue to provide developers with efficient and economical model services, helping more AI-native applications to be implemented.

The Sun Wukong Ecology announced that it will hold an in-depth roundtable discussion on May 12 at 20:00 on the X platform, with the theme "B.AI User Scale and Ecological Expansion Acceleration, Will AI Transfer Stations Become Core Infrastructure in the Agent Era?"It is reported that this event will focus on the critical stage of the AI industry’s transformation towards "application efficiency and entry competition." Guests will discuss the competitive landscape of entry points against the backdrop of tool fragmentation, analyze the logic of the explosion of AI Agents combined with Crypto and stablecoin settlement systems, and engage in in-depth exchanges on how B.AI builds the next generation of AI infrastructure networks through multi-model scheduling, Agent payments, on-chain identity, and automated collaboration.

According to a report by the Korea Herald, data obtained by South Korean National Power Party member Kang Min-guk from the Financial Supervisory Service shows that as of May 4, a total of 15 virtual asset service providers have ceased operations in South Korea, affecting approximately 1.949 million users, with frozen assets amounting to 22.1 billion won (14.87 million USD). Among them, only 6 operators have transferred user assets to the Digital Asset Protection Foundation, involving 1.92 million users and assets of about 2.36 billion won (1.59 million USD). Only 131 users have recovered their assets through the foundation, accounting for 0.006% of all users, with returned assets of about 74.52 million won (50,000 USD), which is only 0.3% of the total assets.Member Kang pointed out that current laws do not require service providers to transfer user assets to the foundation when ceasing operations, lacking legal enforcement mechanisms, and the foundation has not actively promoted the asset recovery application process. He urged the Financial Supervisory Service to expedite the advancement of the second phase of legislation to strengthen user protection mechanisms.

Fluid released a recap of the Resolv incident, stating that on March 22, Resolv was compromised due to an attack on its signature infrastructure, resulting in the malicious issuance of approximately $80 million in unsecured USR. Fluid faced a risk exposure of about $100 million, leading to approximately $21 million in bad debt. The final plan is as follows: Resolv will bear about $9.7 million, the Fluid governance treasury will bear $8.2 million, the team will bear $1.5 million, and the remaining USR within the protocol has been destroyed by Resolv at the contract level.Fluid stated that its smart contracts were not breached, all user funds are safe, and the protocol maintains full solvency. In addition, Fluid has upgraded its oracle and pricing risk control systems and will suspend buybacks, significantly reduce, or eliminate FLUID incentives.

According to official news, Consensys submitted a comment letter to the U.S. Securities and Exchange Commission (SEC) stating that the SEC's latest interpretive framework for crypto assets may leave regulatory gaps, creating compliance uncertainty for self-custody wallet providers like MetaMask.Consensys requests that the SEC clarify through a targeted safe harbor or other exemption measures that self-custody, user-led interfaces that only support the trading of non-security crypto assets potentially attached to investment contracts do not need to register as broker-dealers.Consensys stated that this move aims to ensure that U.S. users can continue to use open, neutral peer-to-peer blockchain tools.

CoW DAO announced that its domain registrar was subjected to a social engineering attack on April 14, during which the attacker briefly controlled the official domain for about 4.5 hours and directed users to a phishing website, thereby inducing them to sign malicious transactions. The project team emphasized that the CoW Protocol itself was not compromised, but some user assets were affected during that time window.In response to this incident, the CoW DAO community governance proposal CIP-86 has been approved, establishing a discretionary compensation fund to reimburse affected users for their losses. The official reminder states that eligible users must submit their claims by May 14, including affected wallet addresses, asset information, transaction hashes, and names, and apply via email at help@cow.fi, with the email subject clearly stating "Discretionary Grant Claim for".

According to the official announcement, Gate Live has officially launched the "Private Mode Live Room" feature, providing a higher level of access control and content security for live streaming scenarios. This feature is now available on the web and is also supported in App version v8.18.0, currently open to all streamers. Streamers can flexibly set keys according to their needs, ensuring that only specific user groups (such as core fans, VIP users, or paying users) can watch live broadcasts, previews, and replay content after entering the key.This feature also brings more flexible marketing scenarios, allowing streamers to conduct various operational attempts such as lotteries, internal sharing sessions, or exclusive events through targeted key distribution, achieving more precise reach and higher conversion efficiency. For users, entering the live room with a key allows them to access higher quality and more targeted content.The Private Mode Live Room not only effectively prevents content from being accessed by non-target users but also makes live interaction more focused, helping to improve overall communication quality and participation experience. This mode can also enhance fans' sense of identity and participation, contributing to increased loyalty and stickiness. The launch of the Private Mode Live Room is an important step for Gate in continuously optimizing the content ecosystem and user experience. In the future, Gate will continue to expand more functional capabilities around live streaming scenarios, helping creators and users establish higher quality and more valuable connections.

According to an official statement from JPYC Co., Ltd., when searching for "JPYC" in wallets or DEX, counterfeit tokens with similar names, logos, or symbols may appear.The official reminder is to never judge the authenticity of a token solely based on its name or icon. It is essential to strictly verify that the token contract address matches exactly with what is listed in the official FAQ; even a single character difference indicates a different token. Users are also reminded not to perform any operations such as sending, exchanging, authorizing, or signing with unknown tokens.

SlowMist has issued a security warning stating that a high-risk phishing activity targeting TRON wallet users has been discovered. Attackers created a fake Chrome extension for the TronLink wallet, using Unicode bidirectional control characters and Cyrillic homographs to disguise the brand name. After installation, the extension loads a complete phishing page through a remote iframe, forming a "shell-core separation" credential theft chain.The malicious extension name uses homographs for disguise, and its Chrome Store page inherits the high user count and positive reviews of the real extension, lowering the review threshold. There is very little local code, only loading remote pages, making static analysis nearly impossible to detect malicious behavior. The remote phishing page perfectly replicates the official TronLink web wallet interface, stealing mnemonic phrases, private keys, Keystore files, and passwords, and relaying them in real-time via a Telegram Bot.Built-in anti-analysis features disable right-click, developer tools, drag-and-drop, and printing, and redirect based on the geographic and language settings of Russian users to evade detection. SlowMist recommends immediately uninstalling suspicious extensions, clearing local storage, checking for abnormal traffic, and if credentials have been entered, creating a new wallet and transferring assets immediately.