xpl

GoPlus Security released an analysis stating that the Liquid Staking Vault contract of ListaDAO was attacked due to a business logic flaw. The attacker triggered the share calculation function of the Dividend contract when transferring specific tokens, which affected the reward distribution logic of the staking vault, ultimately stealing a large amount of assets from the contract.GoPlus Security reminds that this logical vulnerability exists in both the Liquid Staking Vault and Dividend contracts, and any fork or reused implementation carries a high risk of being exploited. Developers and projects are strongly advised to conduct reviews and fix the vulnerabilities accordingly. Smart contract security should not rely on "one-time audits."

CoW Swap tweeted that it has regained control of the cow.fi domain and has been operating normally on cow.finance for some time, and is currently gradually transitioning back to the original domain.The official statement indicated that the attacker deceived the DNS registrar with forged documents on April 14 to gain control of the cow.fi domain; the attacker deployed a highly realistic phishing website, implementing it in two phases: first, inducing users to sign malicious transactions through a wallet stealer, and then stealing mnemonic phrases and passwords through fake wallet pop-ups; this attack targeted the domain registrar and did not involve a breach of CoW Swap's own infrastructure or private keys. Affected users should use tools like Revoke.cash to revoke all authorizations and consider transferring funds to a new wallet.

The open interest (OI) of the HIP-3 market on Hyperliquid reached a peak of approximately $2.38 billion and currently remains at a high of around $2.1 billion, reflecting a growth of about 580% year-to-date. This growth is primarily driven by "non-crypto assets."Among the top ten markets by trading volume on the platform, only three are crypto trading pairs, while the rest consist of tokenized stocks and commodities, including the Nasdaq index, S&P 500, crude oil, gold, and silver. Analysis indicates that the core driving force comes from the demand for "24/7 trading of traditional assets." Unlike traditional markets that are limited by trading hours, HIP-3 enables investors to trade stock and commodity exposure around the clock through on-chain settlement and a non-intermediary structure. Additionally, TradeXYZ accounts for over 90% of the open interest in HIP-3, becoming the main source of liquidity in this sector.

According to the official announcement, Gate DEX will launch the 13th Anniversary New Frontier Exploration Program from April 15 to May 27, with a total prize pool of 69,300 USDT. The event revolves around multi-dimensional on-chain behaviors such as trading, interaction, and invitations. After creating and binding a Gate Wallet, users can "board" by completing trading tasks, engaging in on-chain interactions, or inviting friends, unlocking different exploration footprints and participating in reward sharing.This event features five main sections, including the 13th Anniversary Trading Explorer Tasks, Contract Trading Leaderboard, Newcomer Boost On-Chain Interaction Carnival, Invite Top 13 Leaderboard, and 13th Anniversary Social Easter Eggs.Among them, the prize pool for the 13th Anniversary Trading Explorer event reaches up to 45,000 USDT, and users can share rewards based on the number of exploration footprints completed, with a maximum of 300 USDT per individual; the total prize pool for the Contract Trading Leaderboard is 13,000 USDT, with a maximum of 3,130 USDT available; additionally, there are multiple reward incentives for the invitation leaderboard and newcomer activities.

The Jito Foundation has signed a memorandum of cooperation with the Korean digital asset custodian KODA to explore providing institutional custody and staking support for JitoSOL in the Korean market.According to a Monday announcement, the agreement covers the promotion of institutional investors and the development of compliant custody and staking pathways. This move comes as the Korean Financial Services Commission is expected to finalize the digital asset regulatory framework later this year. In February, the Jito Foundation began exploring the launch of the JitoSOL ETF in Korea with Hanwha Asset Management, but it is still pending regulatory approval. KODA is supported by investors such as KB Kookmin Bank and holds a VASP license and ISMS certification, providing custody infrastructure such as cold storage and MPC key management.

According to monitoring by Pidun, 1 billion DOT tokens were abnormally minted and sold on the Ethereum chain.On-chain data shows that about 1 hour ago, the attacker transferred the contract control to a malicious address by tampering with administrator permissions, subsequently minting 1 billion DOT and immediately selling them, causing the coin price to plummet from $1.22 to nearly zero.The incident is still unfolding, and Polkadot's official response has not yet been released. The target of this attack was bridging assets on Ethereum, not the native Polkadot chain.

Three sources revealed that Anthropic is exploring the possibility of designing its own chips. This plan is still in the early stages, and Anthropic may ultimately decide to only procure AI chips instead of designing them in-house. Another source indicated that Anthropic has not yet determined a specific design plan and has not yet assembled a dedicated team for the project.

According to official news, Gate will launch the Interstellar Exploration Program event from April 8 at 16:00 to April 23 at 16:00 (UTC+8). This event is aimed at users who are participating in trader follow trading for the first time, with a total prize pool of 66,000 USDT.During the event, users can sign up to receive a 30 USDT trading experience bonus, allowing them to experience follow trading at no cost. In addition, the platform will rank users based on the trading volume generated by following traders, with the top 100 users able to share a reward of 10,000 USDT proportionally; at the same time, users will be ranked based on the actual profit amount generated from follow trading, with the top 20 users able to share a reward of 6,000 USDT, with a maximum individual reward of 1,200 USDT.

According to monitoring by Arkham, Drift exploiters are transferring funds, and they have just transferred $14,800 worth of SOL to a new wallet.

The Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology of China has monitored and found that attackers are using exploit tools targeting Apple Inc.'s terminal products to carry out cyber attack activities, which can lead to serious harms such as information theft and system control. The affected range includes Apple terminal products such as iPhone and iPad running iOS 13 to 17.2.1.Attackers induce users to use the Safari browser to visit web pages containing malicious code through methods such as SMS, email, or web poisoning, comprehensively utilizing security vulnerabilities present in the terminal devices to implant remote control Trojans into the victim's terminal products, stealing sensitive user information, gaining maximum privileges, and taking control.It is recommended that users of Apple terminal products conduct risk assessments, and promptly fix vulnerabilities through version upgrades and patch installations (refer to the Apple Security Updates). Pay attention to system update notifications and the latest security update announcements released by Apple, upgrade to the latest secure version in a timely manner, strengthen security awareness, avoid clicking on unknown links, and prevent the risk of cyber attacks.

According to a report by Jinshi Data, the General Office of the Ministry of Industry and Information Technology has issued a notice on launching a special action to empower the development of small and medium-sized enterprises (SMEs) through inclusive computing power, mentioning the innovative service model of computing power.Improve the SME section of the China Computing Power Platform, the computing resource docking section of the China SME Service Network, and the national computing internet service node section (hereinafter collectively referred to as the SME platform section), to promote the precise matching of SME demand and computing resource supply, and implement flexible payment models such as "card time," "calculated time," and Token billing.Explore innovative businesses such as "computing power banks" and "computing power supermarkets," supporting SMEs to deposit idle computing resources and achieve flexible use through cross-regional and cross-cycle scheduling. Implement an artificial intelligence SME entrepreneurship support plan, encouraging local relevant departments to subsidize "computing power vouchers," "storage vouchers," and "transportation vouchers" to SMEs that meet industrial orientation through the SME platform section, simplifying the acquisition and usage process.

Drift Protocol disclosed that the execution process of this security incident began with a test withdrawal transaction initiated from its insurance fund. About one minute later, the attacker took over administrative privileges and executed subsequent operations through two pre-signed durable nonce transactions.The project team stated that this attack was caused by multiple factors, including the delayed execution of pre-signed transactions and the compromise of multi-signature approval, which may be related to targeted social engineering attacks or transaction misdirection. Drift is currently collaborating with several security agencies to investigate the causes and is working with cross-chain bridges, exchanges, and law enforcement agencies to track and freeze related funds. A detailed review report will be published later.

Vergex and Z.ai jointly launched GLM-5 Trading Odyssey, open to developers and traders. Participants can build trading agents based on the GLM model, operating in real markets with real returns as the core evaluation standard.This event differs from traditional AI trading tools, as participants will directly enter real execution scenarios. Vergex, as the AI Trading Harness, provides strategy conversion, constraint validation, and risk control, addressing the challenges of AI trading black boxes and uncontrollable execution. Its open-source project NoFx has received over 11,000 stars on GitHub, providing the technical foundation for this event.It is reported that Z.ai was established in 2019 and is a leading foundational model company. GLM-5 ranks first in the Artificial Analysis Intelligence Index open-source model list, and the upcoming GLM-5.1 is expected to improve performance by about 50% compared to its predecessor. Both parties are promoting AI Trading from model capabilities to production-level systems.

Zhou Xiaochuan, former governor of the People's Bank of China, stated yesterday at the Boao Forum for Asia Annual Conference 2026 that a good payment system is not a champion of a single technology or performance. Just like instant payment is not necessarily good, the most important thing is "adaptation." He pointed out that regulation needs to combat money laundering and prevent drug trafficking, cross-border gambling, telecom fraud, etc. Several central bank governors mentioned at the forum that digital currencies are now used in payment systems, but fraud also uses digital currencies, and "it is quite severe." Zhou Xiaochuan believes that the ability to combat fraud still needs to be continuously improved.When discussing the topic of regulatory adaptation, Zhou Xiaochuan mentioned stablecoins again. He said that now, as soon as the proceeds from telecom fraud arrive, they are immediately split into hundreds or thousands of accounts to evade compliance checks, which means it is quite difficult to recover losses afterward. "Stablecoins fundamentally bypass compliance checks; everyone needs to think clearly and not follow the trend." Zhou Xiaochuan also emphasized that cryptocurrencies and blockchain technology can be explored, but it does not mean that "peer-to-peer" and "decentralization" are all positive. One cannot hastily conclude that using correspondent banks and SWIFT messages in the original backend systems is outdated; the key is to adapt to the user's experience.