developers

Zach Pandl, the head of research at Grayscale, pointed out that the number of monthly active developers for Zcash has roughly doubled over the past two years, while the broader cryptocurrency developer community has declined from its peak during the same period.About 70% of Zcash's active developers have over a year of experience in cryptocurrency development, which is higher than the overall industry average of 58%. These developers possess expertise in zero-knowledge proofs and post-quantum cryptography research. The article suggests that the continued engagement of developers indicates the network's capability for ongoing improvement. The growing developer community of Zcash combines a strong privacy ethos with the goal of making private digital currencies more accessible. This momentum is expected to continue supporting protocol innovation and may ultimately translate into an increase in ZEC valuation.

Renowned developer and T3 Code founder Theo discovered that although Anthropic's newly released Fable 5.2 is more powerful, the API equivalent usage available to subscription users is significantly lower. Theo has been tracking the actual request data of Claude Code for a long time. According to his estimates, for the same monthly subscription fee of $200 for Claude Ultra, using Opus 5.5 would yield an API usage equivalent to about $15,000 per month; switching to Fable 5.2 would only provide about $3,000, a difference of nearly 5 times.Anthropic stipulates that Ultra users can use a maximum of 50% of their total quota for Fable each week. Even if the entire quota is not used, as long as Fable reaches its limit, users must switch to other models or pay extra to continue using it. Theo estimates that if Opus 5.5 is used fully in a week, approximately 1,200 interaction rounds and 230 task sessions can be completed. If the Fable quota is exhausted first and then switched to Opus, the total number of interaction rounds would drop to about 900, although the number of completed task sessions might be slightly higher since Fable can sometimes complete tasks in one go without repeated communication.The API unit price of Fable 5.2 has decreased by 20% compared to the previous generation, with input and output tokens costing $8 and $40 per million, respectively, but it is still twice that of Opus 5.5. Anthropic reminds users that Fable will consume subscription quotas faster than other Claude models. Currently, Anthropic is offering eligible subscription users 1 to 3 opportunities to reset their Fable quota, with the number of resets depending on the subscription duration. Each reset can return the Fable quota consumed in the current week, allowing users to continue using it without waiting until the next week.

According to CoinDesk, Solana developers have proposed to abolish the persistent nonce transaction feature, which was used in the April attack on the trading protocol Drift, resulting in a loss of at least $270 million. The proposal still requires technical approval and is expected to take effect on the mainnet as early as May 5, 2027.Persistent nonce allows signed transactions to remain valid for a long time, enabling custodians and exchanges to perform offline signing. Relevant institutions will need to migrate to alternative solutions, and the migration requirements from the Solana Foundation may delay the final deadline.

Zcash developers proposed to shorten the blockchain target block interval from 25 seconds to 20 seconds to accelerate transaction confirmation speed. On Sunday, developers ValarDragon and Evan Forbes submitted a draft of a Zcash Improvement Proposal (ZIP) to the Zcash community forum, hoping that this change will be included in the next community vote and considered in the upcoming NU7.1 network upgrade.According to the proposal, shortening the block interval will reduce the expected waiting time for the first transaction confirmation, thereby improving the user experience for offline payments, exchange deposits, and cross-chain swaps. The developers stated that this change will not increase the overall processing capacity for daily privacy transactions on the network; at the same time, despite more frequent block generation, the proposal will maintain Zcash's existing issuance schedule.The proposal was made a few days after the NU7 upgrade went live. On Friday, the NU7 upgrade activated on the mainnet, shortening the network target block interval from 75 seconds to 25 seconds. This upgrade also introduced a network sustainability mechanism, using part of the transaction fees collected for future mining rewards while maintaining Zcash's supply cap of 21 million ZEC.

The Ethereum Foundation published a blog, reminding contract developers and auditors to check whether their projects rely on 8 Gas billing assumptions, which will no longer hold due to the adjustments in Gas charging methods in Glamsterdam with EIP-8037 and EIP-8038. The Ethereum Foundation has established a code repository that provides explanations, examples, and keywords for self-checking related to each assumption. Affected projects can contact the team via email.The team is collaborating with several auditing companies and conducting internal audits, but it cannot cover all projects on Ethereum and their on-chain and off-chain code. The Ethereum Foundation announced on October 23 that it has postponed the Glamsterdam upgrade originally scheduled to be activated on the Hoodi testnet, with a new activation time yet to be determined. Ethereum Foundation researcher Toni Wahrstätter stated on October 26 that the reason for the delay was a report from ChainSecurity that revealed issues with EIP-8037 when interacting with certain contracts, and its impact is now largely understood.

According to Web3 developer brucexu.eth, he encountered a phishing scam involving fake recruitment in January this year. After using Cursor to open the project directory provided by the other party, his device was infected with a Trojan, but ultimately there was no asset loss.He stated that the attacker provided a code repository through the recruitment process; he initially thought it was safe to just view the code without running it, but after analyzing the sample, Yu Xian, the founder of Slow Mist, warned that opening the project directory could also trigger malicious code. After confirming the infection, he transferred assets, rotated credentials, and reinstalled the system.

According to Fields' concept, an attacker stealing 1 BTC needs to provide an additional 1 BTC from a quantum-safe wallet as collateral, and both funds will be locked for a waiting period, such as 30 days.Before quantum attacks become a reality, the original owner can create a quantum-safe "mine" that contains hidden proof of ownership. If the thief later attempts to transfer the vulnerable coins, the stolen BTC and the thief's collateral will be locked. The owner can disclose the proof during the waiting period to reclaim their BTC and receive the thief's collateral as a penalty. The thief cannot determine which addresses have traps before investing funds.

On November 4th, B.AI announced that it now supports GitHub account login. Based on the existing multiple login methods, developers can quickly access by clicking "Login with GitHub," eliminating the need to fill out cumbersome information. The convenience and security of account access have been enhanced simultaneously. For developers who frequently use code repositories, CI tools, and multi-environment collaboration, this method reduces the costs of repeated registration and information entry, making account management and team collaboration smoother, and allowing developers to seamlessly integrate into the B.AI developer ecosystem. Welcome to visit chat.b.ai/chat to experience the new login method.

According to IT Home, Qualcomm has announced that its Qualcomm AI Hub is now open to developers in China. Partners and developers can use this platform to accelerate the creation of terminal-side generative AI and agent AI. The Qualcomm AI Hub integrates Models, Workbench, Apps, and the GenieX edge inference framework.Among them, AI Hub Models provides a library of over 230 pre-optimized models that continues to expand; AI Hub Workbench allows developers to fine-tune models on real cloud-hosted devices; AI Hub Apps offers sample applications and reference code to help developers integrate AI Hub Models into their applications. The Chinese version of Qualcomm AI Hub also provides resources and support through its official website, Qualcomm Terminal Cloud China Device Farm, and developer forums.

According to a report by the Korean News Agency, Palantir CEO Alex Karp stated in a letter to shareholders released with the third-quarter financial report on November 2 (local time) that alignment issues do exist, but the real problem is not aligning the goals of technological products with human interests, but rather aligning the goals of AI developers and customer interests with the public interest of humanity.The report interprets this as meaning that instead of being wary of AI entities being hostile to humans, we should be more cautious of large AI developers like Anthropic and OpenAI pursuing selfish goals. Karp has previously criticized AI developers for attempting to absorb core data and "alpha" (technological advantages) of enterprise clients into their own AI.

Smart contract developer Justin Kalland posted on X, indicating that the Binance hacker may have made a potential mistake, and MetaMask should retain any Web2 logs it can access as much as possible. He stated that the hacker sent 175 million USDT to a new wallet, and about 2.5 minutes later, that wallet received 2 ETH, likely used to pay for gas fees, which aligns with the usage pattern of other attack wallets.Kalland noted that exactly two minutes later, the wallet used MetaMask's Gas Station service, even though there were already gas fees at that time. Three consecutive transactions appeared in the same block, including an ETH deposit from the Gas Station, an unlimited USDT authorization to the Kyber Network router, and a payment of 127.67 USDT to the Gas Station. The amount of this ETH deposit perfectly matched the maximum gas budget after combining the Kyber authorization and USDT payment, down to the wei.Kalland stated that the ETH held by the wallet at that time was sufficient to cover the aforementioned fees, reasonably inferring that the user was using the MetaMask wallet and mistakenly selected USDT to pay for gas fees due to haste. Using the MetaMask Gas Station requires going through MetaMask Sentinel, and the transaction is broadcasted by it rather than through conventional RPC, meaning that related interactions likely left off-chain records that may contain IP metadata. Among the checked attacker wallets, this is the only one that showed the use of the Gas Station, with the address 0xAa246BF639586a6Ba46762D378CE50cA4fc654a0.

Regarding the incident of Binance allegedly being hacked, there are opinions suggesting that hackers may have exploited the Ethereum EIP-7702 mechanism to control wallets and transfer funds. User 0xVEER stated that developer 0xjustadev had warned about such a situation during the EIP-7702 discussion approximately two years ago. Currently, it has not been officially confirmed by Binance whether this incident is indeed related to EIP-7702; the aforementioned content is merely a community opinion.The attached screenshot shows that in October 2024, a developer pointed out in the Ethereum community forum discussion thread on EIP-7702 (Set EOA account code) that phishing techniques at that time mainly revolved around EIP-712 signatures, which were relatively readable and easier to simulate. The proposal could potentially allow attackers to transfer all valuable assets, including native tokens, through signatures that are less readable and harder to simulate. The developer also expressed concern that wallets might adopt highly centralized contract signature whitelists as a result, constituting a regression in security and decentralization.

According to CoinDesk, XRP Ledger developers are testing a new feature that aims to allow the creation of blockchain accounts with an initial balance of zero, with existing accounts bearing the reserve required for new accounts, thereby lowering the financial threshold for payment applications and automated software to create wallets on a large scale. This proposal was submitted on October 15 in the form of a SponsoredAccountCreate transaction proposal.According to current XRP Ledger rules, each account must reserve at least 1 XRP as a reserve, meaning that creating 100,000 independent accounts would require locking up 100,000 XRP. The new proposal intends for sponsored accounts to bear this reserve requirement, and a broader fee sponsorship mechanism in the future could also allow applications to pay transaction fees on behalf of users, but the overall reserve requirement for the network will not be eliminated. This feature is expected to lower the usage threshold for scenarios such as embedded wallets, RLUSD stablecoin payments, and AI agent automated payments.However, the related code is still under review, and the sponsorship mechanism it relies on has not yet gone live on the mainnet. As of October 19, the mechanism has only received 11 votes out of the 35 required validator votes, still falling short of the 29 votes needed for approval.

According to "Du Jia," Tencent is currently beta testing "HermitKit," an AI capability plugin for WeChat Mini Programs, providing three levels of access: API, UI components, and Demo. This plugin supports streaming calls to large models through ChatApi, creates and manages Agents using AgentBuilder, and enables multi-turn conversations, with built-in session storage and long-term memory capabilities. Additionally, it can bind remote Agents via QR code scanning through AgentChannel to complete message sending and receiving.Currently, HermitKit showcases 7 types of functional demonstrations, including AI SDK, Agent Channel, Agent Management, Pet Agent, Chatbot, Travel Planning, and Plugin Market. Among them, the AI SDK aligns with cloud development APIs such as createModel, generateText, and streamText; the Pet Agent allows developers to read pet status through interfaces and trigger status changes using props; the Plugin Market enables searching, publishing, and downloading MCP, Skill, and Expert resource packages. This plugin has not officially launched yet, and related capabilities may still be subject to adjustments, with specifics to be confirmed by official statements.

American AI developers can provide the UK government with early access to AI models for security testing without angering the Trump administration. Previously, the Trump administration had requested that developers not share new AI models before their release. This move indicates that the United States has adopted a more moderate stance on international cooperation in AI security.

The core development team of Solana, Anza developer Jacob Creech, stated that unlike some blockchains, Solana users do not need to urgently transfer assets due to AI-accelerated password cracking or quantum computing threats. He explained that Solana uses the Ed25519 signature algorithm, where the signing key is derived from a secret seed through hashing. Even if elliptic curve cryptography is cracked in the future, attackers cannot directly recover the original seed from it.Creech mentioned that theoretically, Solana could introduce a hash-based seed ownership proof through a network upgrade, allowing original holders to verify their identity and migrate to a more secure signing scheme. Anza has developed a related proof-of-concept prototype. He also emphasized that Solana is currently still secure and has a technical roadmap to address future cryptographic threats.

Bitcoin News posted on the X platform that Bitcoin Core 32 is currently undergoing candidate version testing, with the developers aiming to release it on October 10.This version can speed up block validation by reading database data in parallel, but it will not change the block generation speed. Four wallet commands will default to the updated partially signed transaction format, while the old format will still be available as needed. Security patches can prevent custom wallet names from executing commands on non-Windows nodes, and in one test, the memory growth caused by unauthenticated HTTP was reduced from about 3.2 GB to about 3 MB.

Ethereum developers warn: Attackers can exploit free testnet ETH and one-time builder identities to win Sepolia block auctions and withhold transaction payloads during the Glamsterdam testing period.This attack does not threaten mainnet funds but may disrupt infrastructure testing. The Sepolia public test is scheduled to launch on October 6, with the Hoodi test tentatively set for October 27, and the mainnet activation time is still undetermined.