chr

According to GoPlus citing a Koi report, the Claude Chrome extension under Anthropic has a high-risk prompt injection vulnerability, affecting all versions of the extension below 1.41.Attackers can construct malicious web pages that silently load an iframe containing a cross-site scripting (XSS) vulnerability in the background, executing malicious payloads within the a-cdn.claude.ai subdomain. Since this subdomain is on the extension's trust whitelist, attackers can directly send malicious prompts to the Claude extension and execute them automatically, without requiring user authorization or any clicks, leaving the victim unaware.This vulnerability can allow attackers to manipulate the Claude extension to read users' Google Drive documents, steal business access tokens, or export chat logs, and can take over the current browser session to perform sensitive operations like sending emails as the victim. GoPlus recommends that users immediately update the Claude extension to version 1.41 or above and remain vigilant against phishing links.

According to The Block, BlackRock's tokenized fund BUIDL has introduced the oracle provider Chronicle as a new verification solution.According to a Tuesday announcement, Chronicle's "Asset Proof" system will provide "independently verified position-level data," which can be viewed on the Chronicle dashboard. This data "continuously proves the availability, timeliness, and integrity of the fund's asset composition." Chronicle's asset proof is an institutional-grade oracle layer that directly obtains data from custodians and managers. BUIDL is currently the largest tokenized fund, managing approximately $1.7 billion in U.S. Treasury bonds, overnight repos, and cash assets.

OpenClaw founder Peter Steinberger posted on the X platform that the Discrawl 0.2.0 version has been released, with significant optimizations in data synchronization speed.Currently, he has been using this tool daily to analyze the core pain points and user feedback in the OpenClaw Discord community.

According to The Block, Nasdaq-listed tokenization company Streamex Corp. (stock code: STEX) has announced the appointment of Christine Plummer as Chief Financial Officer.Plummer has worked at Morgan Stanley for over twenty years and then served as the Global Financial Director at cryptocurrency exchange Coinbase. Streamex stated that Plummer will be responsible for overseeing the company's financial operations and driving the expansion of its institutional platform.Streamex primarily focuses on the tokenization of physical assets such as gold. In February of this year, the company launched the tokenized securities product GLDY, aimed at providing investors with exposure to gold and generating returns. The company believes that gold tokenization has the potential to surpass Bitcoin in terms of trading volume, market capitalization, and institutional adoption rate.

According to Jinshi News, Christopher Hodge from Natixis stated that the Federal Reserve may face calls for interest rate cuts at the March meeting. He mentioned that if the data for February is weak and the data for January is revised down, the rationale for the Federal Reserve to hold steady will be questioned. This will strengthen the dovish view that the recent labor data may just be "fool's gold."

The Chief Information Security Officer of Slow Fog Technology, 23pds, issued a reminder to be wary of fake imToken Chrome extensions. A fake imToken Chrome extension in the Chrome Web Store is phishing for seed phrases and private keys.

According to market news, Bitcoin is currently approaching the key resistance level of $74,000, with a cumulative increase of over 10% since the outbreak of the conflict in the Middle East. It is noteworthy that this round of increase has occurred against the backdrop of declining risk appetite in global stock markets and a simultaneous strengthening of the dollar.The Dollar Index (DXY) has risen over 1% this week, reaching 99.68 on Wednesday, the highest level since November of last year. Historically, Bitcoin has typically shown a negative correlation with the dollar, but since Trump won the 2024 election and proposed pro-crypto policies, both have experienced synchronized ups and downs multiple times.

GoPlus has released a security alert that a vulnerability in the Chrome browser allows malicious extensions to escalate privileges through the Gemini panel. Please upgrade your Chrome browser to version 143.7499.192 or above immediately.This vulnerability allows malicious extensions to control the Gemini Live panel in the Chrome browser, thereby escalating privileges to access the camera and microphone, take screenshots, access local files, and more without user consent. The vulnerability is identified as CVE-2026-0628, and Google has fixed it in the Windows/Mac versions 143.7499.192/.193 and the Linux version 143.7499.192 at the beginning of January 2026. Please check and upgrade your Chrome version immediately.

According to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed that its holdings have reached 1,248 Bitcoins, with a total market value exceeding 120 million AUD.

According to disclosures from the GoPlus Chinese community, the prediction market platform Polymarket was hacked due to a design flaw in the synchronization mechanism between off-chain and on-chain trading results in its order system.The attacker manipulated the nonce, causing on-chain matched trades to be canceled or invalidated before execution, while off-chain records remained valid, leading to API false reports that affected trading behaviors of bots like Negrisk, resulting in user losses. The analysis of the attack process is as follows:The attacker submitted/matched large reverse trades with the market-making bot on the Polymarket off-chain orderbook.The attacker constructed transactions with forged/repeated nonces or utilized on-chain nonce competition, causing the on-chain transactions to inevitably revert.The Polymarket API returned "transaction successful" to the bot before on-chain confirmation, leading the bot to believe that the position had been hedged, while the actual on-chain state had not changed.The attacker then executed real on-chain trades to take advantage of the direction exposed by the bot, thus profiting "risk-free."Since the revert occurred at the chain level, Polymarket fees would not explode, making the attack cost controllable and executable continuously.GoPlus recommends that users pause automated trading tools, verify on-chain trading statuses, enhance wallet security, and closely monitor official announcements from Polymarket.

Arthur Hayes posted on social media that the liquidity of the dollar has decreased by about $300 billion over the past few weeks, mainly due to an increase of $200 billion in the U.S. Treasury General Account (TGA). The government may be raising cash reserves to ensure spending in preparation for a potential shutdown. In this context, the decline in Bitcoin is not surprising, as it is in sync with the contraction of dollar liquidity.

According to Jinshi News, Chris Grisanti, Chief Market Strategist at New York MAI Capital Management, stated that today's Federal Reserve statement and press conference are clearly hawkish. The description of economic activity was upgraded from "moderate" to "robust," while the wording regarding downside risks to employment was removed. Powell indicated that the labor market has "stabilized," and although inflation is stabilizing, it remains "slightly elevated." He believes that there will be no rate cuts in the short term, and under continued economic strength, there may not be any rate cuts even in 2026.

According to Binance spot market data, there is a divergence in the market, with several tokens showing a rebound from the bottom.Specifically, BAT increased by 6.69%, CHR increased by 8.24%, KAVA increased by 5.28%, LSK increased by 5.42%, ONT increased by 5.12%, TRU increased by 6.17%, TRB increased by 5.29%, ZIL increased by 5.67%, and YGG increased by 7.15%.

According to Binance spot data, the market has experienced significant fluctuations. CHR has dropped by 16.29% in the last 24 hours, while SCRT has reached a new low today, with a decline of 11.71% and 11.93%.In addition, ALICE, ACX, and MMT have also shown a "high-to-low" state, with declines of 7.58%, 5.3%, and 9.87%, respectively. On the other hand, HOLO and TOWNS have reached new highs today, with increases of 7.73% and 6.29%, respectively.

According to Binance spot market data, there has been significant volatility in the market. DASH has increased by 17.08% in the last 24 hours, while several tokens are in a "bottoming rebound" state, including CHR, IOTX, ACH, ASTR, and COW, with increases of 5.21%, 5.02%, 10.51%, 5.14%, and 5.05%, respectively.On the other hand, ROSE is in a "high pullback" state, with a 24-hour decline of 6.04%, while ZEN has seen a slight drop within 5 minutes, with declines of 3.4% and 3.13%.

According to Binance spot data, the market has experienced significant fluctuations. AXS has risen by 38.13% in the last 24 hours, reaching a new high for today. CHR has also performed strongly, with an increase of 10.29%, hitting a new high for today.At the same time, AGLD has shown a "high and then low" state, with a 24-hour decline of 8.59%. AGLD has also exhibited a "high and then low" state, with a decline of 8.48%, while OSMO has seen a 24-hour drop of 13.34%.

According to a report from the security agency Socket's Threat Research Team, a malicious Chrome extension named "MEXC API Automator" has been available in the Chrome Web Store since September 1, 2025, capable of stealing users' newly created API keys from the cryptocurrency exchange MEXC and sending them to a Telegram bot controlled by the attacker.The extension lures users with the promise of trading automation, automatically generating MEXC API keys with withdrawal permissions without the user's knowledge, while hiding the display of these permissions in the interface, subsequently leaking the keys along with their ciphertext. This allows attackers to gain complete control over the victim's MEXC account, executing trades, initiating automatic withdrawal operations, and transferring assets within the account. As of the report's publication, the extension is still available for download in the Chrome Web Store, and the research team has reported and flagged this extension to Google.

According to Binance spot market data, there has been significant volatility in the market. CHR has increased by 12.77% in the last 24 hours, reaching a new high for the week. MTL and RED have also reached new highs for the week, with increases of 7.34% and 5.48%, respectively.In addition, VELODROME has shown a "bottoming rebound" state, with an increase of 6.07%. WLFI has shown a "high pullback" state, with a decrease of 6.16%. Among other tokens, SAGA has reached a new high today, with an increase of 5.23%.

Trust Wallet posted on X platform that the browser extension is now back on the Chrome Web Store. Additionally, version 2.71.0 has been released, which includes support for customer service verification codes to assist with the claims process.