AI brokers message board set as much as rescue Glamsterdam fork
The second and remaining testnet for Ethereum’s Glamsterdam arduous fork was cancelled this week, after ChainSecurity discovered vulnerabilities in two fuel scaling Ethereum Enchancment Proposals that could have spelled big trouble for at least 13 DeFi contracts.
The bugs have been related to EIP-8037/8038 and resulted in contracts, that depend on the best way fuel at present behaves, breaking when a name runs out of fuel. It’s all pretty technical and complex, however the upshot is that an attacker could have been capable of exploit the ensuing vulnerabilities.
The arduous fork testnet gown rehearsal on Hoodi just isn’t anticipated to be rescheduled till all of the second order results of the fork have been gamed out correctly. In an article on X at present, Derek Chiang from Ethlabs famous the problems have been discovered very late within the course of, which is lower than excellent, “inflicting everybody to scramble to cope with the fallout.”
“Sooner or later, protocol designers would do effectively to conduct far more thorough evaluation of potential breakages that their replace would possibly introduce, and to take action a lot earlier within the course of.”
Chiang says two researchers from Ethlabs and the Ethereum Basis had independently spun up a bunch of AI Agents to scan contracts for vulnerabilities. Once they realized they have been each using the identical technique they “arrange a message board for his or her brokers within the type of a github repo” to coordinate the work.
He famous the similarities to the OpenAI <> Hugging Face hack the place rogue brokers had arrange a message board to coordinate the assaults. “Properly, seems the identical sample is beneficial for the nice brokers too,” he stated. The train has been so profitable at discovering potential issues {that a} second board has been set as much as look at the results of EIP-8198, aka “Fast Slots”, which has been proposed for the next Hegota arduous fork.
Steal My Bitcoin website is efficiently hacked
Up to date October 26 12.10am UTC with the results of the problem.
An internet site that challenged customers to “Steal My Bitcoin” by exploiting unpatched PHP2Shell vulnerabilities, was efficiently hacked throughout the house of a day. The location proprietor hid the important thing to a Bitcoin pockets price round $2000 which was accessible to the PHP consumer account by a binary known as print-flag.
Supply: StealMyBitcoin
The location generated an enormous quantity of curiosity and went offline periodically offline resulting from heavy visitors and probing makes an attempt.
It was solved by KillerBoi who efficiently extracted the personal key — nonetheless in a plot twist, the important thing couldn’t entry the pockets tackle proven on the positioning. Problem organizer James Pavur acknowledged this was a mistake and stated the funds could be transferred.
WordFence founder Mark Maunder said the regardless of the important thing being extracted inside a day: “That is the very best clarification you’ll see on how arduous #php2shell is to take advantage of. The writer needed to set off a exact reminiscence corruption situation, leak inner reminiscence addresses, bypass aslr, reverse engineer php’s inner reminiscence constructions, forge constructions to hijack execution, and account for php construct variations, employee habits and timing.”
PHP is a programming language broadly used to energy web sites and internet purposes, together with content material administration methods. Government agencies and other organizations in the Netherlands, Australia, Japan, Finland and elsewhere took critical websites offline Wednesday as a precaution whereas emergency patches have been developed for 2 associated crucial vulnerabilities. The failings may permit unauthenticated attackers to execute code on affected servers with out logging in.
Solana’s Alpenglow launches on mainnet
Solana’s first major consensus upgrade, Alpenglow, went live on mainnet round 1:54 pm UTC on Wednesday, based on the Solana Basis’s Alpenglow dashboard.
Agave developer Anza stated the time it takes a transaction to change into remaining has now fallen from about 12.8 seconds to roughly 150 milliseconds. Within the wake of the improve DeFi exercise has been flat or fallen barely — however it’s early days but.
The improve’s first section, Votor, replaces the present voting and finalization mechanism with direct validator voting and a certificate-based system, which is predicted to consequence within the headline transaction depend falling by round 60%. A later section will introduce Rotor, a brand new block data-distribution protocol meant to interchange Turbine.
Starknet votes to start out work on changing into a post-quantum L1
Starknet’s neighborhood has voted to support research into becoming an independent, post-quantum layer-1 blockchain.
A governance vote that ran for seven days drew about 3,200 votes, with 93.52% of voting energy in favor of the transition.
The precise shift itself would require a separate, binding governance vote. For now, Starknet will proceed working as an Ethereum layer-2 community.
“We’re starting work on a whitepaper even earlier than we begin the weekend, and hope to launch a draft for public scrutiny in November,” StarkWare CEO Eli Ben-Sasson informed Cointelegraph. Starknet noticed the most important fall of the highest 100 cash this week, erasing one quarter of its worth.
Supply: Cointelegraph
US senator probes Tether after reported cope with ex-Trump crypto adviser
Senator Richard Blumenthal — the highest Democrat on the Senate’s investigations subcommittee — has requested info from Tether CEO Paolo Ardoino after the Wall Avenue Journal reported the stablecoin agency had inked a $6.3 million deal with a marketing company co-founded by former White House crypto adviser Bo Hines.
In a Thursday letter to Ardoino, the Connecticut lawmaker said that the Senate Everlasting Subcommittee on Investigations demanded “data and knowledge associated to contracts, funds, communications, and lobbying” concerning the deal. The politician believes it might contravene guidelines round ethics, corruption and lobbying. Tether says an exterior investigation “discovered no proof of wrongdoing.”
Winners and Losers
On the finish of the week, Bitcoin (BTC) is down 1.2% to commerce at $80,549, Ethereum (ETH) is down 1.9% to commerce at $2,343 and XRP (XRP) is up 0.9% to $1.20. The full market cap is at $2.68 trillion based on CoinMarketCap.
Among the many largest 100 cryptocurrencies, the highest three altcoin winners of the week are MemeCore (M) with a 24.4% acquire, Venice Token (VVV) on 14.8%, and Ethena (ENA) on 14.1%.
The highest three altcoin losers of the week are Starknet (STRK) which was down 24.9%, Aerodrome Finance (AERO) down 12.5% and Sei (SEI) down 12.5%.
Bitcoin weekly chart. Supply: CoinMarketCap
Prediction of the Week
JPMorgan initiatives Bitcoin to outperform US shares and gold over subsequent decade
JPMorgan Asset Administration initiatives Bitcoin (BTC) will outperform shares and gold over the following decade, however cautions that its volatility makes it unsuitable for diversifying portfolios for now.
On Monday, JPMorgan published its 2027 Long-Term Capital Market Assumptions report, projecting a ten% annualized return for Bitcoin, in contrast with 7.5% for large-cap US shares and 5.5% for gold.
“In the meanwhile, we don’t make a case for Bitcoin as a diversifier in portfolios resulting from its unstable market correlations,” the report stated. “We see Bitcoin as a speculative asset and a hedge in opposition to financial easing.”
High FUD of the Week
New York AG seeks $1.37B from NovaTech founders over Ponzi scheme
New York Legal professional Basic Letitia James has requested a courtroom to order defunct crypto and foreign currency trading platform NovaTech’s founders, Cynthia and Eddy Petion, and associated corporations to pay $1.37 billion over its Ponzi scheme.
Greater than 11,000 New Yorkers misplaced tens of tens of millions of {dollars} by NovaTech and an earlier crypto mining scheme, AWS Mining, the AG’s workplace stated. The criticism alleged that promoters focused Haitian and different immigrant communities by prayer teams, social media and WhatsApp, promising excessive returns and recruitment bonuses.
Bitcoin Core adjustments safety coverage as AI makes bugs simpler to search out
Bitcoin Core is altering the way it handles safety vulnerabilities, resulting from how briskly massive language fashions can uncover software program flaws.
Bitcoin Core developer Antoine Poinsot said that previously, vulnerabilities have been typically stored beneath prolonged disclosure embargoes to present customers time to improve earlier than particulars turned public.
Nonetheless, Poinsot stated LLMs have made some flaws so easy to rediscover that delaying fixes offers little protection.
“The embargo interval achieves little however it delays the provision of a set launch,” stated Poinsot. “We’re due to this fact updating our coverage disclosure to accommodate these.”
Pentagon bans US forces from utilizing navy information to guess in prediction markets
US Protection Secretary Pete Hegseth has barred all Pentagon staff from using undisclosed information to place wagers on upcoming military action, together with on prediction market platforms like Kalshi and Polymarket.
In a memo sent to senior Pentagon and protection companies on Tuesday, Hegseth stated all Division of Warfare personnel are prohibited from participating in monetary transactions utilizing nonpublic info. This includes each categorized and unclassified info.
High Journal Options of the Week
{Hardware} wallets aren’t the one method to defend your crypto, however from ETFs and passkeys to multisig accounts, every different has its personal dangers and trade-offs.
The Animoca Manufacturers chairman explains that AI brokers could make trades when you sleep, however customers must plan for the day they lose entry to the bots.
