BTC $63,013.67 +0.34%
ETH $1,881.13 +0.49%
BNB $609.53 +0.71%
XRP $1.00 +0.28%
SOL $75.48 +1.02%
TRX $0.3313 -0.28%
DOGE $0.0697 +0.22%
ADA $0.1775 -0.72%
BCH $203.19 +0.58%
LINK $9.52 +6.54%
HYPE $56.98 +2.60%
AAVE $86.47 +0.55%
SUI $0.6798 +0.69%
XLM $0.1584 -0.34%
ZEC $488.32 +0.16%
BTC $63,013.67 +0.34%
ETH $1,881.13 +0.49%
BNB $609.53 +0.71%
XRP $1.00 +0.28%
SOL $75.48 +1.02%
TRX $0.3313 -0.28%
DOGE $0.0697 +0.22%
ADA $0.1775 -0.72%
BCH $203.19 +0.58%
LINK $9.52 +6.54%
HYPE $56.98 +2.60%
AAVE $86.47 +0.55%
SUI $0.6798 +0.69%
XLM $0.1584 -0.34%
ZEC $488.32 +0.16%

bc

All
Article
Flash

The Ethereum Foundation provides security funding to WEBCAT to assist in wallet verification front-end code to prevent phishing attacks

According to official news, the Ethereum Foundation's "Trillion Dollar Security" (1TS) has announced a special grant to the Freedom of the Press Foundation (FPF) to support the ongoing development of the open-source tool WEBCAT, aimed at addressing the long-standing front-end code verification security gap in Ethereum wallets and decentralized applications (DApps).WEBCAT (Web-based Code Assurance and Transparency) is an open-source tool designed to help browsers verify whether the code loaded by a website matches the version publicly released by the developer.This funding will promote the expansion of WEBCAT to Ethereum wallets and application scenarios, enabling users to verify whether the front-end pages they access have been tampered with.The Ethereum Foundation stated that while HTTPS can verify the website a user is connected to and encrypt communication, it cannot prove that the front-end code actually running on the website is the same version released by the developer. If an attacker controls the website's front-end code, they may modify the transaction receiving address without the user's knowledge or induce the user to sign transactions that do not match the content displayed on the page.The Ethereum Foundation noted that front-end attacks have become a significant security risk for blockchain infrastructure, with malicious modifications to web interfaces potentially leading to supply chain attacks, DNS hijacking subsequent attacks, and user interface deception.WEBCAT was initially developed by the Freedom of the Press Foundation to enhance the code credibility of secure communication systems like SecureDrop.With this expansion into the Ethereum ecosystem, it will complement security measures such as "Clear Signing" in the 1TS program: the former helps wallets confirm that the application front-end has not been tampered with, while the latter helps users understand the transaction content they are approving.

hot_img ICBC has completed the first cross-border payment of the new digital RMB on the "Digital Currency Reach" platform in the country, with an amount close to 10 million yuan

The Shanghai Branch of Industrial and Commercial Bank of China (ICBC) has collaborated with ICBC Singapore Branch to successfully implement the country's first cross-border payment business between China and Singapore based on the digital renminbi cross-border settlement comprehensive service platform "Digital Currency Express" (CBETS). This transaction, involving nearly ten million yuan in import shipping fees, was fully paid using digital renminbi, with funds arriving in the Singapore recipient's account on the same day, achieving "zero time difference" and "high transparency" in cross-border fund transfers. The service targets subsidiaries of central enterprise group trade platforms that regularly need to procure iron ore from abroad and pay for shipping fees, with high frequency and large amounts of cross-border settlements."Digital Currency Express" is a cross-border settlement infrastructure built by the International Operation Center of Digital Renminbi under the guidance of the People's Bank of China's Digital Currency Research Institute. Overseas participants can access services through the Hong Kong access point "One Point Access", compatible with both centralized and blockchain systems, and the message standards comply with ISO20022. On June 16, 2026, the first batch of 26 financial institutions signed direct participant service agreements. This business marks a significant breakthrough for ICBC in leveraging the infrastructure of the International Operation Center of Digital Renminbi to establish an integrated cross-border clearing system for domestic and foreign branches, achieving comprehensive coverage of two-way digital renminbi payment and receipt services with Singapore and Laos.

Stripe plans to acquire PayPal for $53 billion to build a stablecoin empire, and HSBC Orion has been selected to issue the world's first G7 digital sovereign bond

According to BBX data, the integration of traditional financial infrastructure and cryptocurrency settlement layers accelerated simultaneously in two distinctly different tracks yesterday, with the following core dynamics:PayPal Holdings, Inc. (NASDAQ: $PYPL) reported by CoinDesk today as the headline news, the world's largest independent payment technology company Stripe (privately held) has teamed up with private equity firm Advent International to propose an acquisition offer of approximately $53 billion to PayPal; PayPal is currently reluctant to engage actively, but the offer has sparked widespread discussion on Wall Street about the "largest payment merger in the world." Stripe acquired the stablecoin infrastructure company Bridge.xyz for $1.1 billion in 2024 (which has served cross-border stablecoin settlements for institutions such as Visa and Coinbase), while PayPal has its own stablecoin PYUSD (with a circulation size of about $700 million) and independent cryptocurrency trading capabilities, covering over 400 million active accounts. If the acquisition is completed, the combination of Stripe + PayPal will control the largest single payment network globally, while integrating Stripe's stablecoin settlement (Bridge.xyz) with PayPal's native stablecoin (PYUSD)------the combination will create the largest-scale "traditional payment + stablecoin" dual-track infrastructure to date, directly threatening Visa and Mastercard's positions in cross-border settlement scenarios and posing competitive pressure on Circle's USDC in retail payments.HSBC Holdings plc (NYSE: $HSBC) reported by CoinDesk today, the UK government plans to issue the world's first digital sovereign bond for G7 countries, with the issuance scheduled for early 2027; this bond will be issued and circulated on HSBC's blockchain bond platform Orion, operating within the Digital Securities Sandbox framework of the Bank of England (BoE) and the Financial Conduct Authority (FCA), aimed at testing the feasibility of reducing settlement time (transitioning from T+2 to T+0) and lowering back-office costs. HSBC Orion has completed multiple batches of tokenized gold, green bonds, and Hong Kong government bonds on-chain issuance from 2023 to 2025, and this UK sovereign bond is the first instance of G7 countries introducing blockchain settlement at the sovereign debt issuance level------this milestone will elevate the compliance of tokenized government bonds from "emerging market experiment" to "highest sovereign endorsement," signaling significant implications for institutional adoption of tokenized government bond products like BlackRock BUIDL and Securitize.

Axelar responds to security incident: Axelar and IBC are unaffected, the vulnerability originates from a third-party token contract's "infinite minting" issue

The cross-chain protocol Axelar Network released a statement regarding the recent security incident related to Secret Network, stating that there is a misunderstanding within the community about the event. Both Axelar and the Inter-Blockchain Communication Protocol (IBC) were not attacked or compromised. The affected token smart contracts were neither developed, deployed, nor maintained by Axelar, and Axelar's firewall mechanism also prevented the impact from spreading to other chains.It is reported that the exploited contract is a forked version based on CW20-ICS20, but the developers removed two core security checks, resulting in an "infinite minting" vulnerability. By deleting the verification mechanisms originally used to prevent such issues, this fork altered the original trust model of the contract and did not undergo a new security audit.Axelar Network explained that anyone can deploy contracts for cross-chain asset wrapping through IBC, and similar contracts have also been used to wrap tokens from other chains into Secret Network. However, the Secret side fork version in this incident has vulnerabilities due to the removal of key security checks. This incident is not a unique logical flaw, nor is it an issue with the IBC protocol itself, but rather a security risk introduced by modifications to third-party contracts.
app_icon
ChainCatcher Building the Web3 world with innovations.