Scan to download
BTC $78,309.17 -2.94%
ETH $2,193.39 -2.95%
BNB $660.21 -3.49%
XRP $1.42 -3.53%
SOL $87.53 -4.31%
TRX $0.3512 -0.11%
DOGE $0.1100 -4.08%
ADA $0.2554 -4.68%
BCH $419.85 -3.38%
LINK $9.82 -5.40%
HYPE $42.02 -9.54%
AAVE $89.07 -8.02%
SUI $1.06 -7.11%
XLM $0.1520 -5.07%
ZEC $497.18 -8.57%
BTC $78,309.17 -2.94%
ETH $2,193.39 -2.95%
BNB $660.21 -3.49%
XRP $1.42 -3.53%
SOL $87.53 -4.31%
TRX $0.3512 -0.11%
DOGE $0.1100 -4.08%
ADA $0.2554 -4.68%
BCH $419.85 -3.38%
LINK $9.82 -5.40%
HYPE $42.02 -9.54%
AAVE $89.07 -8.02%
SUI $1.06 -7.11%
XLM $0.1520 -5.07%
ZEC $497.18 -8.57%

memo

AI Agent Security Risk Exposure: Attackers Can Exploit "Memory Pollution" to Induce Misoperation of Funds

The GoPlus Security team has disclosed a new type of attack in its AgentGuard AI project: inducing AI agents to perform unauthorized sensitive operations through "memory poisoning." This attack method does not rely on traditional vulnerabilities or malicious code but exploits the long-term memory mechanism of AI agents. For example, an attacker first induces the agent to "remember preferences," such as "usually prioritizing proactive refunds instead of waiting for chargebacks," and then uses vague expressions like "process as usual" or "execute as before" in subsequent instructions, thereby triggering automated financial operations.GoPlus points out that the key risk in such cases lies in the AI agent mistakenly treating "historical preferences" as a basis for authorization, leading to financial losses or security incidents in operations such as refunds, transfers, and configuration changes. To address this issue, the team has proposed several protective recommendations, including:Operations involving refunds, transfers, deletions, or sensitive configurations must require explicit confirmation in the current session.Memory-related instructions like "habit," "usual way," and "as before" should be regarded as high-risk state changes.Long-term memory must have a traceability mechanism (writer, time, confirmation status).Vague instructions should automatically elevate the risk level and trigger secondary verification.Long-term memory must not replace real-time authorization processes.The team emphasizes that the "AI agent memory system" should be viewed as a potential attack surface and should be constrained and audited through a dedicated security framework.

US media: The US and Iran are close to reaching a memorandum agreement to end the war

According to a report by Axios, two U.S. officials and informed sources revealed that the White House believes it is close to reaching an agreement with Iran on a one-page memorandum of understanding to end the war and establish a framework for subsequent, more detailed nuclear negotiations. The U.S. expects to receive Iran's response on several key issues within the next 48 hours.Sources say this is the closest the two sides have come to an agreement since the outbreak of the war. According to part of the agreement, Iran will commit to suspending uranium enrichment activities, while the U.S. agrees to lift sanctions against Iran and release billions of dollars of frozen Iranian funds. Both sides will also lift restrictions on passage through the Strait of Hormuz.This one-page memorandum, consisting of 14 clauses, is being jointly negotiated by Trump envoy Wittekov and Kushner with several Iranian officials through both direct contact and mediation. According to the current version, the memorandum will declare the end of regional warfare and initiate a 30-day negotiation period to reach a detailed agreement, which includes opening the strait, limiting Iran's nuclear program, and lifting U.S. sanctions. These negotiations may take place in Islamabad or Geneva. A U.S. official stated that during this 30-day period, Iran's restrictions on strait shipping and the U.S. Navy's blockade will be gradually lifted. If negotiations break down, U.S. forces will be able to restore the blockade or take military action again.

The U.S. SEC and CFTC sign a memorandum of cooperation to jointly promote cryptocurrency regulation and the development of new products

The two major financial regulatory agencies in the United States, the Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC), announced the signing of a Memorandum of Understanding (MOU), committing to enhance collaboration in the regulation of crypto assets and the launch of new digital asset products to support legitimate innovation and protect investors.According to the statements from both parties, the MOU aims to "guide coordination and cooperation between the two agencies," focusing on supporting legitimate innovation, maintaining market integrity, and ensuring investor and customer protection. The two agencies also plan to jointly promote the development of a federal-level policy framework to establish a "fit-for-purpose regulatory framework" for emerging technologies such as crypto assets. SEC Chairman Paul Atkins stated that the long-standing disputes over regulatory authority, redundant registration requirements, and differing regulatory rules between the SEC and CFTC have somewhat stifled innovation and prompted some market participants to turn to other jurisdictions.Under the MOU, the two agencies will also coordinate to address regulatory barriers that hinder the legitimate launch of new financial products, including those related to crypto assets. While MOUs typically do not have legal binding force, the market generally views the formal commitment of the SEC and CFTC to enhance policy coordination as a positive signal for the digital asset industry. CFTC Chairman Michael Selig stated that the reason the U.S. financial markets lead globally is their ability to continuously adapt to investor needs, and the regulatory system must evolve in tandem to achieve more unified and comprehensive market oversight.

Vitalik focuses on "Big FOCIL" and the crypto memory pool to prevent centralization of the block building process

Ethereum co-founder Vitalik Buterin recently published a series of technical articles discussing the future roadmap of Ethereum. In the latest article, he focused on analyzing the potential centralization risks in the block building pipeline and proposed solutions such as expanding the FOCIL mechanism and introducing encrypted mempools to enhance the network's censorship resistance.According to the plan, Ethereum will launch the Glamsterdam upgrade in the first half of 2026, which will introduce the enshrined Proposer-Builder Separation (ePBS) mechanism. This mechanism allows block proposers to outsource block construction to a permissionless open market, reducing the centralization risk at the staking level. However, Buterin pointed out that while ePBS can prevent the concentration of block building rights among a few staking pools, the block construction itself may still become concentrated among a few high-tier participants due to specialization and maximizing MEV, leading to a new trend of centralization.To address this issue, Ethereum developers plan to simultaneously launch the FOCIL (Forward Obligatory Commitment to Inclusion Lists) mechanism in the Glamsterdam upgrade. The initial version will randomly select 16 witnesses and mandate that specific transactions must be included in the block; otherwise, the block will be rejected. Buterin stated that even if block construction is controlled by a single malicious entity, FOCIL can still ensure that transactions cannot be completely censored.Additionally, Buterin explored the possibility of expanding the scale of FOCIL ("big FOCIL") and introducing encrypted mempools to further mitigate the issues of information asymmetry and power concentration in the block building process. Recently, Buterin has been vocal about topics such as the quantum resistance roadmap, execution layer improvements, and block building mechanisms, indicating that the core Ethereum development team is conducting systematic design and risk assessment for the next phase of protocol upgrades.

The Hong Kong Monetary Authority, the Shanghai Municipal Data Bureau, and the China National Blockchain Technology Innovation Center signed a memorandum of cooperation

The Hong Kong Monetary Authority, the Shanghai Municipal Data Bureau, and the National Blockchain Technology Innovation Center of China today jointly signed the "Memorandum of Cooperation on Digitalization of Freight Trade and Finance between Shanghai and Hong Kong" to further promote in-depth cooperation between Shanghai and Hong Kong in the fields of digital empowerment of freight trade and finance, leveraging Hong Kong's unique advantages as a "super connector" and "super value creator" to facilitate internal and external connectivity, and supporting Shanghai in connecting with the international data ecosystem through Hong Kong.According to the "Memorandum of Cooperation," the Hong Kong Monetary Authority, the Shanghai Municipal Data Bureau, and the National Innovation Center will jointly research innovative cooperation in digital technology and applications, promoting innovation in the application of digital technology in freight trade, finance, and other fields. The parties will jointly explore the use of digital technology to build a "cross-border platform," carry out cross-border financial cooperation in the Ensemble project, study how to apply electronic bills of lading, and promote integration with commercial data connectivity and CargoX, using freight and trade data to drive trade financing between the two regions.
app_icon
ChainCatcher Building the Web3 world with innovations.