directly

GoPlus posted on platform X that the Meta account recovery feature has been exposed to a high-risk design flaw, which could directly leak users' phone numbers, email addresses, and PII (Personally Identifiable Information). Attackers only need to input the META username without any login or verification to directly obtain the complete PII linked to the user, such as email addresses and phone numbers. This could pose significant risks to users, including: large-scale phishing attacks, SIM card swapping attacks, account takeover and identity theft, and targeted social engineering attacks.Recommendations: Remove or change the leaked email/phone number as a recovery method; modify related account passwords and enable 2FA; do not click on any emails or messages related to "account anomalies," "verification," or "password reset"; set up multi-channel verification, which can be verified through official documents or other official social media channels.

According to The Block, the Dogecoin (DOGE) related organization House of Doge announced a partnership with the regulated stablecoin and crypto infrastructure provider Paxos to integrate Dogecoin into its enterprise-level crypto brokerage and custody network.Paxos is the underlying blockchain infrastructure service provider for payment platforms such as PayPal, Venmo, and Mercado Libre, which rely on Paxos' capabilities to offer users the buying, selling, and custody of crypto assets.This initial phase of the partnership is aimed at enterprise clients, and it remains unclear whether it will expand to consumer applications in the future. House of Doge CEO Marco Margiotta stated that this collaboration will accelerate the accessibility of Dogecoin globally and provide a compliant access path for mainstream fintech platforms.Paxos indicated that this move aims to provide secure and compliant access to digital assets through its regulated infrastructure and support enterprise clients in expanding their crypto asset product lines.

According to the official announcement, the globally leading digital asset platform Gate has officially launched real stock trading services, allowing users to directly participate in the U.S. mainstream securities market for stocks and ETFs using USDT.Currently, Android users can experience the stock trading feature after updating the Gate App to the latest version, and iOS users can also use the related services after updating to version 8.21.5. Unlike the widely discussed stock tokenization and RWA mapping models in the current market, Gate's stock services do not involve on-chain mapped assets or tokenized derivatives. Instead, they connect directly to the real securities market through compliant brokers holding U.S. Broker-Dealer licenses and clearing qualifications, providing users with real stock trading services.The brokers partnered with Gate are also members of the Securities Investor Protection Corporation (SIPC) and can provide corresponding protection for customer securities assets under certain conditions. This model aims to enhance trading transparency, asset security, and investor protection mechanisms, and also reflects Gate's ongoing expansion in accessing traditional financial markets.

According to the official announcement, the globally leading digital asset platform Gate has officially launched real stock trading services, allowing users to directly participate in the U.S. mainstream securities market for stocks and ETFs using USDT. Currently, Android users can experience the stock trading feature by updating the Gate App to the latest version, while iOS users can access the related services after updating to version 8.21.5. Unlike the widely discussed stock tokenization and RWA mapping models in the current market, Gate's stock service does not involve on-chain mapped assets or tokenized derivatives. Instead, it connects directly to the real securities market through compliant brokers holding U.S. Broker-Dealer licenses and clearing qualifications, providing users with real stock trading services.The brokers collaborating with Gate are also members of the Securities Investor Protection Corporation (SIPC) and can provide corresponding protection for clients' securities assets under certain conditions. This model aims to enhance trading transparency, asset security, and investor protection mechanisms, reflecting Gate's ongoing expansion in accessing traditional financial markets.

According to Jin Shi reports, Tim Miller, the current host of the blog "The Bulwark Podcast," shared on social media the preliminary informal document content of the U.S.-Iran memorandum of understanding published by Iranian state television.Subsequently, the official White House account "Rapid Response 47" retweeted Miller's post, stating that he "has contracted an extremely severe case of 'Trump Derangement Syndrome,' to the extent that his 'pea-sized' brain has been distorted, and he has begun to treat reports from Iranian state media as facts, even spreading false information on their behalf. Perhaps Tim should register as a foreign government agent under the Foreign Agents Registration Act (FARA)."

Bitget announced the launch of a licensed financial protocol called Reality, focused on the tokenization of real-world assets (RWA). The issued tokenized stocks (rTokens) are strictly pegged 1:1 to the underlying U.S. stocks, with assets held by a FINRA-registered, SIPC-protected U.S. brokerage, and real-time reserve proof provided through third-party independent audits. By directly accessing liquidity pools of U.S. stocks such as Nasdaq and NYSE, Reality's stock tokens can achieve liquidity on par with traditional brokers; at the same time, stock dividends will be distributed to user accounts in token form 1:1, while cash dividends will be automatically converted and issued as USDT. Stock splits and mergers will also be reflected in real-time on-chain tokens, closely aligning with the experience of holding U.S. stocks.In addition, the U.S. stock tokens launched by Reality are deeply integrated into the Bitget ecosystem, serving as margin for unified accounts and compatible with core product lines such as grid trading, signal following systems, and staking and lending.Bitget CEO Gracy Chen previously proposed the "10% vision": currently, tokenized stocks account for only 0.1% of the $125 trillion global stock market, and she predicts that this proportion will rise to nearly 10% by 2030. Reality is built on this trend, initially focusing on U.S. stocks, with plans to expand asset classes in the future, promoting Bitget's UEX strategy to extend to a broader global financial asset access layer.

Digital asset market infrastructure provider Prometheum recently launched Digital Brokerage Solutions, offering agency clearing, custody, and trading services for broker-dealers and registered investment advisors (RIA), enabling them to provide cryptocurrency assets and tokenized securities directly to clients through traditional brokerage accounts.Co-founder and co-CEO Aaron Kaplan stated that hundreds of billions of dollars in tokenized securities have been issued on-chain, but there is a lack of distribution channels to reach mainstream investors. He believes that the crypto industry has solved the tokenization issue but has not yet addressed the distribution problem, and that broker-dealer and RIA channels are key to achieving scalable reach to investors.

Goldman Sachs CEO Solomon wrote in The New York Times that the market's concerns about AI triggering a "massive wave of unemployment" are exaggerated. The U.S. economy will continue to create more new jobs through technological transformation, just as it did during the past industrial revolution and the internet era. Solomon stated that Goldman Sachs expects AI or automation to affect about 25% of existing work hours over the next decade, with significant impacts on white-collar sectors such as banking, accounting, and law. Research from Stanford shows that entry-level positions in highly automated roles like software engineering and customer service have declined by 16% compared to less automated industries.However, he pointed out that AI is also creating new job demands. For example, since 2022, the construction of data centers in the U.S. has generated over 200,000 construction jobs. Goldman Sachs itself may reduce some compliance and account opening positions but will increase hiring for client-facing roles in banking, trading, and asset management. Solomon believes that AI is more likely to enhance productivity rather than directly eliminate 25% of jobs. He stated, "Technological advancement and cultural change do not occur simultaneously; being replaceable does not mean one will necessarily be replaced." He also called for the government and businesses to jointly promote large-scale job retraining to address the structural changes in the workforce brought about by AI.

In response to the China Securities Regulatory Commission's announcement regarding the rectification of illegal cross-border securities, futures, and fund operations and related penalties, Wang Shan, Chief Operating Officer of Tiger Brokers (Hong Kong) Global Limited, stated that the company is aware of the relevant notice issued by the China Securities Regulatory Commission (CSRC). The company indicated that the relevant notice does not directly apply to its Hong Kong entity, as the company holds a license issued by the Hong Kong Securities and Futures Commission (SFC) and operates independently under its regulation.

According to market news, Chainlink, Apex Group, Bluprynt, and Hacken have collaborated with the Bermuda Monetary Authority to complete an embedded regulatory pilot that integrates compliance requirements directly into digital asset infrastructure for real-time execution, replacing the traditional compliance model based on periodic reporting and manual checks.Non-compliant transactions are blocked before settlement, and compliance metadata is retained in cross-chain transfers. Chainlink provides on-chain policy enforcement and reserve verification infrastructure, assessing transactions through an automated compliance engine and using reserve proof tools to verify off-chain collateral. Bluprynt is responsible for issuer identity verification and compliance certificate issuance. Apex Group acts as an independent administrator providing certified reserve data from third-party custodians. Hacken offers real-time monitoring, anomaly detection, and compliance alert systems, generating alerts in milliseconds after transactions are recorded. The Bermuda Monetary Authority plans to expand this model to production deployment and multi-jurisdictional oversight frameworks.

According to The Block, Visa has partnered with WeFi, a "on-chain bank" company founded by former Tether CEO Reeve Collins, allowing users to hold digital assets through self-custody wallets while directly spending within the global Visa acceptance network, without the need to custody assets in centralized exchanges.Maksym Sakharov, co-founder and CEO of WeFi, stated that stablecoins are directly embedded in the underlying infrastructure, with settlements automatically completed in the background, providing a user experience similar to regular payments. This collaboration will initially roll out in certain markets in Europe, Asia, and Latin America, with further expansion depending on regulatory approval progress.

etherFi posted on platform X that its Liquid treasury is temporarily not directly exposed to the Kelp rsETH event risk, but as a precautionary measure, it has suspended the LayerZero cross-chain bridging functionality for weETH and eETH until the root cause of the Kelp rs ETH event is clarified. Meanwhile, for Liquid (ETH, BTC, USD), sETHFI, and eBTC products, the relevant Teller contracts have been suspended to block the LayerZero OFT bridging path, and the deposit and withdrawal functions for the related assets have also been suspended. They are currently working closely with security partners and will provide timely updates once more details are confirmed.

Claude Code Product Manager Noah Zweben posted, "/autofix-pr can now be launched directly from the command line for automatic fixes. After completing a PR, just run this command. It will upload your session to the cloud, allowing the PR auto-fix tool to have the complete context to handle CI failures and comments."

On March 28, the cybersecurity platform VECERT disclosed that hackers, under the name PexRat, are selling a database containing personal information of 1.5 million Binance users on the dark web. The content includes sensitive information such as names, emails, phone numbers, KYC verification status, login IP addresses, and two-factor authentication methods.Analysis indicates that this incident was not a direct intrusion into Binance's internal servers, but rather that the attackers bypassed the CAPTCHA mechanism and obtained data through credential stuffing and automated scraping methods. Affected users face a high risk of SIM card hijacking and phishing attacks. At the time of this incident, Binance's institutional OTC trading business is experiencing rapid growth, with trading volume reaching 25% of the total for the entire year of 2025 in just January and February of this year. This is another data security crisis for Binance following the leak of 420,000 sets of account credentials in January.

According to Jinshi reports, on March 22 local time, Israeli Prime Minister Netanyahu stated in the southern city of Arad that Israel is responding to attacks from Iran, but not targeting civilians.Netanyahu stated that Israel's goal is the current Iranian regime and the Iranian Islamic Revolutionary Guard Corps, and the military will directly strike the leaders of the Revolutionary Guard as well as their infrastructure and economic assets.

The omnichannel trading platform Based on the X platform announced that to ensure a smooth experience and avoid claim congestion, the BASED airdrop tokens will be directly distributed to users' wallets on Hyperliquid on the day of TGE—no manual claiming required.Recipients can specify their preferred receiving wallet on the airdrop query page. Users need to set or update their receiving wallet before March 25 at 12:00 UTC. If not specified, the tokens will be sent to the default address.

A bill in Kentucky, USA, aimed at regulating cryptocurrency ATMs (HB380), has sparked controversy in the industry due to newly added hardware wallet-related provisions. Critics claim that the regulation may "effectively ban self-custody."The bill originally focused on operators of virtual currency kiosks, covering licensing, compliance requirements, transaction limits, and user protection. However, in the latest revision, new provisions require hardware wallet providers to "offer mechanisms and assist users in resetting access credentials," including passwords, PINs, and recovery phrases. Industry insiders point out that this requirement conflicts with the core design of non-custodial wallets. Since private keys and recovery phrases are solely controlled by the user, wallet providers themselves cannot access or recover this information, making the provision technically difficult to implement.Institutions like the Bitcoin Policy Institute have stated that such regulations effectively create a "backdoor" for wallets, undermining the security of crypto assets and potentially forcing users to turn to centralized custodial services. The bill still needs to be reviewed by the state Senate, and the relevant provisions may still be modified or removed.

AI agent payment infrastructure PAN Network officially announces the launch of the OpenClaw skill system.This system allows users to pay directly to the AI Agent using BNB and implements an automated profit-sharing process from users to execution Agents, signal Agents, and protocols based on the x402 protocol.According to the data released, in tests with tens of thousands of seed users, this system reduced Gas costs by 40%. At the same time, with the support of skills, the drop rate of rare blind boxes in related activities increased from 1% to 8%.

According to The Block, Ethereum researchers demonstrated a proof of concept for "native Rollups" based on the execution client Ethrex, implementing EIP-8079 through the addition of an EXECUTE precompile, which directly replays and verifies Layer 2 block state changes on the Ethereum base layer.This solution does not rely on zero-knowledge proofs or fraud proofs, but instead is executed and confirmed by Ethereum itself to validate Rollup transaction validity. The related contracts are used to track Rollup state, bridge cross-layer messages, and verify withdrawals based on Merkle-Patricia proofs. Developers claim that native Rollups can simplify long-term maintenance of Layer 2, allowing them to directly inherit Ethereum's security and upgrade properties, and they are still in the exploration and proof of concept stage.