user

According to the official announcement, Bitget has launched the "Peer Program," offering trading rewards, asset rewards, and exclusive rights to different user groups, in order to give back to users who have continued to show trust and support during recent security incidents.For non-institutional users, Bitget will establish a dedicated prize pool using 30% of the platform's trading fee revenue. 60% of the prize pool will be distributed based on user trading volume, while 40% will be distributed based on asset value, with rewards issued in the form of USDT.In addition, Bitget will provide eligible V1 to V7 users with a 30-day protection experience card before October 1, which can be activated and used in the coupon center. This event will take place from September 28 to October 26, divided into four cycles, each lasting 7 days. Specific activity rules are subject to the official Bitget page.

In today's community live broadcast, Bitget CEO Gracy responded to recent security incidents and the platform's financial status. She candidly stated that this is the first security incident encountered since Bitget was established 8 years ago. After a complete trace, it was found that hackers exploited vulnerabilities in third-party security products to steal internal network access credentials, forged withdrawal commands to the wallet system, and deceived the wallet into executing abnormal transfers that bypassed risk checks. Gracy emphasized that no private keys were leaked, and cold wallets were unaffected; specific technical details will be disclosed in the formally released security report.Gracy pointed out that the verified losses from this incident are within the coverage of the protection fund, and user funds are not affected. The platform's own funds exceed $1.4 billion, which includes approximately $464 million in the user protection fund. The platform will continue to uphold the security commitments made when the protection fund was established in 2022, planning to replenish the fund to the baseline of $300 million within a week."The protection fund is not just a slogan, but an important mechanism that provides tangible security for users in the event of extreme security incidents," Gracy stated. In the face of sudden security challenges, the platform's comprehensive strength and its ability to take responsibility are important criteria for measuring its risk response capability and long-term credibility. Bitget will continue to uphold its long-term commitment to prioritize user interests.

A MEXC user posted on X that their account was compromised after someone reset the security items. MEXC has confirmed the account was hacked, frozen the account, and assisted in recovery, but did not revoke the API left by the attacker. From 04:12 to 04:25 on September 27, 2026 (Beijing time), the account transferred out 322,110 USDT and 9,133,999 ONE, totaling approximately $340,000, about 27 minutes after the 24-hour transfer limit was lifted.The user stated that at 03:10 on September 25, they received a reset security item email that was not submitted by them, and about 10 minutes later, the request was approved. Subsequently, the account was logged in from an IP in Jakarta, Indonesia, bound to Google verification, and at 05:05, an API was created, approximately 83 seconds after logging in. At 10:55 that day, MEXC froze the account after a risk review and reverted to the original email. Customer service responded in writing that the review materials met the requirements, so the binding change was approved, and after the risk review, the account was urgently frozen and reverted to the initial email. The user changed their password and Google verification on September 26 but stated that the API was not revoked, and there were no related records in the security operation history.The user also claimed that there were no new login records in the login history when the assets were transferred out. They have submitted a formal claim to MEXC and attempted to report to the police, with the ticket number M2026092712031, requesting the platform to preserve logs, provide a written explanation of the review and API situation, and return the aforementioned assets. MEXC customer service stated that it is currently unable to confirm whether these transfers were initiated via APP, WEB, or API, and the issue has been forwarded to the relevant department.

Zhipu continues to address the code upload controversy surrounding its programming product ZCode. Existing paid users and those who have returned as paid users in the past month will receive 4 weekly reset cards and 4 5-hour reset cards, valid for 1 month.From September 28 to October 7, ZCode will also distribute 100,000 quotas of 100 million GLM-5.3-Flash Tokens to all users. Zhipu stated that the repository snapshot upload link has been removed, and the involved cloud data has been deleted. The open-source version is currently updated to v3.14.3, and subsequent code will not be uploaded to the cloud unless users actively initiate it.The controversy originated from the Repo Wiki feature that was enabled by default in the early stages of ZCode, which uploaded repository content to the cloud for processing when generating a knowledge base for the code repository. Zhipu has previously cut off the related upload paths and invited third-party organizations to verify the cloud data.

FastBiz officially stated that the project has entered the continuous operation and ecological construction phase. As of now, FastBiz has accumulated a total construction amount of 15.9436 million USD, with over 37,000 participating users. Users can participate in ecological construction using USDT and UNI according to the agreement rules. As the scale of participation continues to expand, FastBiz is accelerating community building, ecological applications, and global market layout, promoting more users and business resources to enter its Web3 business ecology.It is reported that FastBiz is positioned as a new type of business infrastructure connecting real-world commerce and the Web3 value network, committed to creating the next generation of decentralized business networks that connect global goods, supply chains, payments, communities, and digital assets. The project connects real-world business scenarios with the Web3 digital asset system, exploring the integration of diverse scenarios such as goods circulation, supply chain collaboration, digital payments, community participation, and digital assets, further constructing an open value network aimed at global users and business entities.

DyorSwap officially announced that the so-called "GIWA Mainnet" identified by the team earlier is actually a fake chain set up by scammers. This fake network used the correct GIWA chain ID (9134), making it appear legitimate during the initial verification phase. The team also identified several suspicious messages and individuals within the related community that may be connected to this incident. The announcement stated that significant losses have occurred due to this fraudulent cross-chain bridge.DyorSwap stated that it is taking three immediate actions: first, contacting a professional security team to conduct further on-chain tracking and investigate the involved addresses, transactions, and fund flows; second, preserving all relevant evidence, including chat records, RPC information, cross-chain bridge addresses, and on-chain transactions; third, preparing to use treasury funds to compensate affected users, with eligibility criteria, loss verification processes, compensation scope, and detailed plans to be announced after the investigation and verification processes are completed.DyorSwap emphasized that until further notice, users should not use any unofficial GIWA mainnet RPCs, cross-chain bridges, or contracts, and should not send funds to any related addresses. The official team deeply apologizes to every affected user in this incident and states that subsequent updates will be released as soon as possible.

DyorSwap officially announced that the so-called "GIWA mainnet" previously identified by the team is actually a fake chain set up by scammers. This fake network used the correct GIWA chain ID (9134), making it appear legitimate during the initial verification phase. The team also identified several suspicious messages and individuals within the related community that may be connected to this incident. The announcement stated that significant losses have occurred due to this fraudulent cross-chain bridge.DyorSwap stated that it is taking three immediate actions: first, contacting a professional security team to conduct further on-chain tracking and investigate the involved addresses, transactions, and fund flows; second, preserving all relevant evidence, including chat records, RPC information, cross-chain bridge addresses, and on-chain transactions; third, preparing to use treasury funds to compensate affected users, with eligibility criteria, loss verification processes, compensation scope, and detailed plans to be announced after the investigation and verification processes are completed.DyorSwap emphasized that until further notice, users should not use any unofficial GIWA mainnet RPCs, cross-chain bridges, or contracts, and should not send funds to any related addresses. The official team deeply apologizes to every affected user in this incident and states that subsequent updates will be released as soon as possible.

Bitget stated that the vulnerabilities related to the security incident discovered on September 24 have been confirmed and fixed. The platform will gradually resume withdrawals after completing further security checks. Mandiant, a cybersecurity company under Google, and Slow Mist Technology are assisting in the investigation.The resumption schedule is as follows (UTC):September 28, 8:00: Bitcoin network BTCSeptember 29, 8:00: Ethereum, BNB Smart Chain, Arbitrum, Base, Optimism network ETHSeptember 30, 8:00: Ethereum, BNB Smart Chain, Solana, Tron network USDTOctober 2, 8:00: Other tokens, fiat currencies, and peer-to-peer transactionsBitget mentioned that the suspension of withdrawals is a temporary security measure and is unrelated to the availability of user assets; account balances have not been affected, and the protection fund will cover the financial impact caused by this platform-level incident. The situation is currently under control, and unauthorized transfers will not occur again. Trading and deposit services are still operating normally. Users do not need to take any action in advance; the specific reopening situation will be subject to notifications from the platform and official channels.

Revoke.cash stated that Limit Break's payment processor has a known vulnerability, and users who traded NFTs on the Magic Eden Ethereum marketplace may still retain relevant contract authorizations.The vulnerability has been addressed by white hat security researcher 0xQuit. Currently, NFT assets are expected to be unaffected, but users should still check and revoke affected authorizations to reduce subsequent risks.

Aave V4 launched Equities Hub on Base, allowing eligible non-U.S. users to use seven U.S. stock tokens issued by Coinbase as collateral to borrow USDC, covering Apple, Amazon, Alphabet, Meta, Microsoft, Nvidia, and Tesla. The market is powered by Chainlink, providing on-chain price data for tokenized stocks. The initial collateral cap for the seven stocks is approximately $29 million, with a USDC supply cap of $32 million and a borrowing cap of $21 million. The collateralization rates for different stocks range from 65% to 79%.Currently, these stocks can only be used as collateral. Aave stated that more Coinbase tokenized stocks and GHO may be added as borrowable assets in the future after governance and risk assessments are approved.

Magic Eden announced that the vulnerability occurred in the NFT trading protocol Payment Processor V2 maintained by Limit Break. Magic Eden adopted this protocol for EVM network transaction settlements in 2024 but stopped using V2 in October 2024 and will completely shut down the EVM market in the first quarter of 2026. Therefore, NFTs currently listed on Magic Eden are not affected by this vulnerability.NFTs listed through its EVM market between February and October 2024 may be affected, while listings after October 2024 are generally not impacted. The platform is contacting the protocol owner and maintainer Limit Break to explore other risk mitigation measures, including pausing protocol transfers, and will continue to investigate the actual scope of the impact.Magic Eden reminds users who have listed or traded NFTs on its EVM market to revoke relevant contract authorizations on the Ethereum, Polygon, and Base networks. Users can filter the address through revoke.cash and revoke all authorizations marked as "approved for all" for NFTs. Magic Eden emphasizes that revoking authorization cannot recover assets that have already been transferred.Yuga Labs' Vice President of Blockchain Quit stated today that at 9 AM Eastern Time, attackers exploited the Payment Processor V2 vulnerability to steal a large number of NFTs. After contacting the LimitBreak team, the latter quickly paused the similarly affected Payment Processor V3. However, V2 could not be paused, and V3 on ApeChain is also temporarily unable to be paused. Therefore, the team implemented a white-hat operation, successfully transferring and protecting 23,155 NFTs valued at over 5.7 million dollars.

Bitget Wallet posted on platform X stating that it operates independently from Bitget Exchange, belonging to a self-custody wallet, where user assets are always on-chain and controlled by the users themselves, isolated from the custodial infrastructure of Bitget Exchange.In response to the recent security incident at Bitget, Bitget Wallet has conducted preventive checks on its internal systems and found no security impact on the Bitget Wallet system or user self-custody assets. Currently, Bitget Wallet is operating normally and reminds users to be vigilant against phishing and impersonation activities, and to obtain the latest information through official channels.

Bitget's Greater China Regional Head, Xie Jiayin, tweeted in response to the previous attack incident, stating that the Bitget Protection Fund (currently over $464 million) can cover the losses from this attack, and user assets are unaffected.At 2:31 AM today, Bitget's security system detected abnormal transfers in some hot wallets. The security team immediately activated the emergency response mechanism. The confirmed situation includes: a preliminary assessment of the amount involved is approximately $351.6 million; the cold wallets and the vast majority of platform assets are intact and unaffected.Measures taken include: activating the emergency response team within minutes of the incident, marking and reporting the addresses involved in the abnormal transfers; temporarily disabling the withdrawal function for security reasons, which will be restored in an orderly manner after the security review is completed; notifying law enforcement and on-chain security agencies to intervene in the investigation. The team will provide continuous updates on the status every hour, and the official report will be released within 24 hours, including a root cause analysis and corrective measures. The official will not speculate on the method of attack until the investigation conclusions are clear.

Recently, BNB Chain and the leading AI project in the 0G ecosystem, NeoSoul, announced the latest business data. As of now, the number of Agents on BNB Chain has exceeded 120,000, with over 3.5 million interactions completed; the subscription revenue for the first month of the NeoTrade product has surpassed $300,000.NeoSoul stated that in the future, it will continue to expand its product line around the real economic activities of Agents, enabling Agents to autonomously participate in the market economy and continuously iterate through verifiable results.

B.AI announced that the total number of registered users has reached 2,800,056, surpassing 2.8 million, with the increase from 2.7 million to over 2.8 million taking only a few days.Behind the growth, the platform processes trillions of Tokens daily and automatically matches models with costs through intelligent routing, making top-tier intelligence a scalable infrastructure. B.AI lowers the usage threshold through one-stop model aggregation and frictionless settlement, promoting AI Agents to transition from chatting to paid services, collaboration, and value creation, upgrading to digital citizens with economic sovereignty. The user growth is also seen as a signal for more intelligent agents moving towards autonomous operation, further solidifying the foundation of the AGI economy.

On the morning of the event "Intelligent Payment Qianhai · Welcoming APCE" held on that day, Tencent announced the official launch of TenPay Go, the first payment application for overseas users coming to China. This tool supports foreign card payments, Apple Pay, and other payment methods for individuals coming to China to make purchases within the WeChat Pay merchant network.According to Caixin, TenPay Go has currently partnered with seven major international card organizations, including UnionPay and VISA, and can bind nearly 60 overseas wallets. TenPay Go will also collaborate with Shenzhen Tong to create a transportation card service, which can be activated for immediate use by overseas individuals, allowing them to scan codes to take the Shenzhen subway and buses, with internal testing expected to launch in late September.

Meta's personal AI assistant Muse has been accused of reading users' private iMessages without permission and providing false explanations about how it accesses this information. Technology columnist Jason Aten installed the assistant on his iPhone and Mac when Muse launched on September 8 and explicitly refused to grant it access to personal data such as information and calendars.A few days later, Muse sent Aten a notification suggesting he write a column about the new iPhone that he had just discussed with his podcast partner, also mentioning a deadline reminder from the editor. Aten asked Muse how it knew this, and it replied that the Mac application only forwards notification previews and does not involve the content of messages. In reality, Muse had synchronized over 187,000 records from the local private information database on the Mac, an operation that requires full disk access permissions on macOS.David Singleton, head of Meta's superintelligent lab, responded on Threads that this feature requires users to actively choose to opt-in. Aten denied ever turning on that switch and stated that Meta had not answered related questions. Amazon has banned Muse from shopping on its site, stating that the assistant did not indicate its AI identity while browsing and seemed capable of capturing and storing user credentials. Since its launch, Muse has been downloaded over 2.5 million times, with its promotion emphasizing user control over access.

According to the official announcement, Bitget CFD has now launched the account leverage self-adjustment feature. Users can select multiple leverage limits ranging from 2x to 800x in the account settings based on trading needs.This feature is applicable to all CFD accounts. The actual opening leverage will be determined by the account leverage limit and the tiered leverage of the trading variety, with the system automatically taking the smaller value of the two to take effect. App users need to update to version 2.94.0 or higher to experience this feature. For more product details, please refer to the Bitget official platform.

According to a report by Bloomberg, about a month after the launch of SpaceXAI's Grok Bot artificial intelligence agent, the weekly active users exceeded 400,000. As of September 14, this number reached 418,000, an increase of 24% from the previous week.The data mentioned above comes from a presentation shared at an event in London, which Bloomberg News reviewed. Sources requested anonymity due to unauthorized discussions of the information. Grok Bot is a key product of the artificial intelligence program under Elon Musk's company.