ios

According to official news, WasabiCard has launched various AI subscription cards, catering to the global AI tool subscription and payment needs of enterprises and teams, supporting subscription payment scenarios for mainstream AI applications such as OpenAI and Claude. Through card-based payment solutions, companies can handle the procurement and expense management of AI services for different teams, projects, or business lines more flexibly.In addition to AI subscription payments, WasabiCard also supports bulk card issuance for enterprises, fund budget management, and multi-currency account setup, as well as various scenarios such as advertising, business travel, payroll, and e-commerce subscriptions. It helps companies configure payment permissions and budget limits by department, employee, or specific purpose, enhancing the management efficiency of AI-related expenditures and the transparency of fund usage.As AI tools gradually enter daily workflows in research and development, content production, customer service, and operations, cross-border subscription payments and expense management are becoming important infrastructure for global operations of enterprises. It is important to note that currently, WasabiCard-related products are not open for application to enterprises and individual users in mainland China.

Slow Fog's Yuxian posted on platform X, stating that systems prior to iOS version 27 are being exploited by certain black and gray market groups to steal encrypted wallets from iPhone users.It reminds users to promptly update their iPhone, iPad, Mac, and other devices to the latest version, to be cautious when installing apps from unknown sources, and to be careful when opening unknown links through Safari and in-app browsers.

Bitwise has submitted the final prospectus for its NEAR spot ETF and has also released a 39-page investment report on NEAR, co-authored by Bitwise Chief Investment Officer Matt Hougan.The report provides various scenario forecasts for NEAR: under the baseline scenario, NEAR is expected to reach $155 by 2030; under the extreme bullish scenario, the target price is $562; while the bearish scenario predicts $1.63.The report does not shy away from the risks of a significant decline in NEAR's price. In the extreme bullish scenario, Bitwise compares NEAR to Visa. The report notes that Visa processed payment transactions totaling $15.7 trillion in 2024, with a current market capitalization of approximately $701 billion, and uses this as one of the references for assessing NEAR's potential future value. The report also includes a product page for Bitwise's European NEAR ETP at the end.

According to Cointelegraph, blockchain security company SlowMist stated that its investigation has not linked the recent security warning caused by the iPhone Safari attack to confirmed cryptocurrency theft incidents.SlowMist told Cointelegraph that it has not independently confirmed any victims affected by the specific Safari attack samples it analyzed, and the strongest technical evidence it possesses covers iOS versions 18.4 to 18.6.2. The company stated that the reported impact range of "iOS 13 to 26.5" should be regarded as a preliminary assessment, and it tends to avoid claiming that iOS 26.5 is affected until reproducible technical evidence is obtained.SlowMist pointed out that the Safari attack reused the previously disclosed DarkSword exploit chain technology, which is independent of another investigation involving malicious components embedded in App Store applications called FomoPeek. The Google Threat Intelligence Group (GTIG) disclosed DarkSword in March, describing it as an iOS exploit chain used by multiple threat actors since November 2025.

Malicious iOS application FomoPeek has been found to contain multiple kernel exploit modules that can bypass Apple's sandbox and access sensitive wallet data from other applications, and is linked to a theft incident involving nearly $580,000 in cryptocurrency assets. Blockchain security company SlowMist stated that the application is distributed through the Apple App Store. The company noted that the affected versions were released on September 9 and September 12, and the application contains two malicious modules that can gain higher privileges and access Keychain data and files from other applications.Version 1.3, released on September 17, has removed the related malicious components. SlowMist and the OKX security team investigated and found that the related attack framework includes 8 types of attack methods, supporting iOS versions 12 to 18.7.2 and 26 to 26.1. On-chain analysis shows that a hacker address related to the incident received approximately 580,000 USDT, and the funds were subsequently transferred through multiple addresses and services, with some flowing to FixedFloat, KuCoin, and cce.cash.

Arthur Hayes published a new long article titled "Safety First," with the core argument that the claims of "safety first" by Anthropic, OpenAI, and SpaceX, which lead to a slowdown in AGI development, are not out of concern for human welfare but rather due to economic realities. The market does not want AI; it wants AI at "Chinese prices," meaning it needs intelligence that is 100 times cheaper than what is currently available. Hayes points out that "safety first" essentially destroys the demand for computing power. If the spending on training new models decreases and laboratories shift towards efficiency optimization, customers will spend less on computing power. The three major AI laboratories do not generate any profits, and their demand for computing power supports over $10 trillion in investment-grade debt and hundreds of billions in low-quality debt, which rely on profitable tech companies like Nvidia, Broadcom, Google, and Microsoft for off-balance-sheet endorsements. The real backstop is the holders of insurance policies in the United States.Hayes cites an analysis by Nick Nameth that reveals a "self-insurance scam": private equity giants (such as Apollo, KKR, Brookfield, etc.) acquire insurance companies, stuffing AI data center debt and SaaS private credit impacted by AI into insurance assets, and then provide false endorsements with minimal capital through affiliated self-insurance reinsurance companies. Nameth estimates that the total amount of these false reinsurance assets reaches $1.54 trillion. Once the AI data center debt is downgraded by rating agencies due to insufficient demand for computing power, insurance companies will be forced to add capital, while the affiliated reinsurance companies will be unable to pay, leading to insolvency for the insurance companies. In most states in the U.S., the insurance protection limit is only $250,000 to $300,000, and existing insurance companies only pay into the protection fund afterward, which encourages all parties involved to maximize risk-taking. When AIG was bailed out in 2008, TARP funds ultimately flowed to Goldman Sachs and led to record bonuses, while the general public only received foreclosure notices; Hayes believes this scenario will repeat itself.For cryptocurrency investors, the conclusion is a win-win situation. If the U.S. government chooses to become the "last buyer of computing power," it will print money in the name of national security to fund unproductive economic goods, driving up financial speculation and Bitcoin prices; if the government chooses to bail out insolvent insurance companies, it will also need to print money to cover bad AI debts, increasing the money supply and pushing up Bitcoin. Hayes specifically points out that the Federal Reserve voted unanimously last week to raise interest rates by 25 basis points, and RMP bond purchases have stopped since August 14, but commercial banks have taken over to create over $100 billion in currency, and the interest rate hike allows banks to earn an additional $7.5 billion in excess reserve interest each year. This money will be used to expand loans and market speculation, and the net effect remains stimulative. The fluctuations in the cryptocurrency market, which saw a slight increase at the end of August, are about to end, the supply of dollars will continue to grow, and Bitcoin and some selected altcoins will rise. Hayes also described this situation as "incredibly wonderful," stating that the government will not allow the free market to stop building AI data centers, there will be an oversupply of spot computing power, the usage of AI agents will increase, and the surge in money printing will drive investors to chase cryptocurrency assets.

The Chief Information Security Officer of the blockchain security company SlowMist, 23pds, stated that attackers are exploiting the Darksword vulnerability to bypass iOS security mechanisms through Safari, gaining control of devices and extracting private keys and other data from self-hosted cryptocurrency wallets. This vulnerability has been used in attacks targeting users in Saudi Arabia, Turkey, Malaysia, and Ukraine. The Google Threat Intelligence Group previously disclosed that Darksword initially only affected iOS versions 18.4 to 18.7.23pds noted that attackers have adapted it to iOS 26.5, but this assessment has not yet been officially verified. Attacks typically begin with social engineering, where users click on malicious links sent via social media or messaging applications, potentially granting Root access to the device and extracting wallet data. Users should promptly update their mobile systems and avoid visiting website links sent by strangers; additionally, three investors have lost nearly 1.8 million dollars in Bitcoin due to downloading fake wallet applications from the official Apple App Store and have filed a lawsuit against Apple.

Binance Wallet Security Announcement: iPhone users please check if you have installed the FomoPeek application. Binance has noted a recent security incident disclosed by the community. According to security companies such as SlowMist, the third-party application FomoPeek (versions 1.1-1.2) contains malicious code that can exploit vulnerabilities in the iOS system to gain maximum permissions on the device and may access sensitive data stored on the device, including private keys, mnemonic phrases, login credentials, chat records, files, etc. Please note that such malware directly attacks the device itself. If the attack is successful, all application data on the affected device may be accessed.Please check the following:Are you using an iPhone or iPad running iOS 26.x or earlier?Have you installed the FomoPeek application?If both of the above apply to you, it is recommended to take the following steps immediately:Delete the FomoPeek application and do not reinstall it.Update the iOS system to the latest version.For users with self-hosted wallets: Create a new wallet on a device that has never installed the application and transfer assets to the new wallet address.If you notice any unusual asset activity, please retain the affected device and relevant evidence, and contact customer service for further investigation.At the same time, all users are reminded: Do not install applications from untrusted sources and keep your device software up to date.

The Chief Information Security Officer of Slow Fog, 23pds, posted on platform X stating that the black and gray industries have established an attack chain against iOS users: clicking on links to extract private keys and mnemonic phrases; when users access web pages using Safari, they gain JS layer read and write capabilities through WebKit/JSC memory corruption; bypassing PAC to obtain native call capabilities; escaping the WebContent sandbox; escalating privileges in the kernel to gain root access, stealing Keychain and wallet data.The affected versions are iOS 13 to 26.5, and it is recommended that iOS users upgrade as soon as possible.

Apple announced that Siri artificial intelligence will begin testing in English today, with plans to expand to 5 languages in the future. Siri AI will initially be unavailable in the European Union on iOS, iPadOS, and watchOS.

According to Cointelegraph, the cross-chain liquidity protocol Symbiosis announced that it has recovered 15 BTC (approximately $1.1 million) from its Bitcoin bridge vulnerability and deposited it into a multi-signature wallet controlled by the team. The vulnerability occurred last Friday, where the attacker exploited the protocol's flaw to mint 46.1 billion uncollateralized tokens, resulting in a profit of 4.3 WBTC (approximately $336,000).Symbiosis had previously offered a 20% white hat bounty to the attacker for the return of the assets, but the deadline has passed, and the attacker has not responded. The protocol is now offering a 20% bounty to anyone who can provide clues to help recover the assets, while also promising to announce a compensation plan for affected liquidity providers. The affected Bitcoin bridging function remains suspended.

The on-chain security platform Blockaid discovered a vulnerability in the Bitcoin bridge of the cross-chain protocol Symbiosis, where attackers minted approximately 2^62 syBTC to a newly created externally owned account, valued at about 46.1 billion dollars when calculated to 8 decimal places, and sold about 4.39 WBTC on Uniswap V4 on Ethereum, realizing a cash-out of approximately 336,000 dollars.Symbiosis stated that the attack occurred around 4:28 AM on September 11, and the team has suspended the BTC routing, while other routings remain operational and unaffected. The team has recovered about 15 Bitcoins and deposited them into a multi-signature wallet controlled by the team, while offering a 20% white hat bounty on the funds to the attackers, with a deadline of September 13.In recent weeks, Liquid Network, Nomic, and Symbiosis have all experienced security incidents involving the expansion of supply by minting tokens without real asset backing. As of September 13, Symbiosis has not publicly disclosed a technical review of BridgeV2, the final loss amount, or confirmation on whether the attackers accepted the bounty.

According to Bitcoin News, the Chief Technology Officer of BlueWallet stated that they screened 904 iOS applications labeled as non-custodial cryptocurrency wallets in the App Store and analyzed 494 of them, ultimately marking 45 as potentially having serious or high-risk security issues, with 23 being of potential serious risk and 22 being high risk.The issues mainly include suspected uploading of mnemonic phrases or private keys to servers, insufficient randomness in generated wallets, storing keys on the server side, using hard-coded encryption keys, and loading unsigned JavaScript code that can interact with sensitive wallet data. The Chief Technology Officer of BlueWallet cautioned that the analysis results may contain false positives, and applications not appearing on the list are not necessarily safe. When it comes to storing large amounts of Bitcoin, merely passing the App Store review and the application's reputation are not sufficient grounds to trust the software.

The cross-chain liquidity protocol Symbiosis announced that it has encountered a security incident. Around September 11, 2026, at 04:28 UTC, attackers exploited a vulnerability in the Bitcoin bridge to carry out the attack. The BTC route has been suspended, while other routes are still operating normally.The official statement indicated that only the Bitcoin bridge was affected and has been isolated from other systems. The remaining routes, including EVM chains, TRON, TON, and components like Octopools, were not impacted. The team has recovered approximately 15 BTC, which is stored in a multi-signature wallet controlled by the team. The official has offered a white hat bounty to the attackers, amounting to 20% of the funds, valid until September 13, 2026; thereafter, an equivalent proportion will be offered to informants who can assist in recovering the funds.The final loss assessment is still ongoing, and confirmation data will be released later. The official is contacting affected liquidity providers one by one and developing a compensation framework. The relay group is still operational and ensuring network security.

The cross-chain liquidity protocol Symbiosis is currently under attack on the BSC chain, resulting in an actual loss of approximately $336,000 WBTC.

Grok, the AI assistant under xAI, posted on X that it is now available for trading and managing portfolios on Coinbase.After users add the Coinbase connector, they can directly ask Grok to check balances, analyze data, and place or cancel trades for any available assets in the chat.

According to CoinGecko data, IOST has increased by over 44% in the last 24 hours, currently priced at 0.001092.

According to the latest Merkle Tree Proof of Reserves (PoR) data from Huobi HTX, as of September 1, 2026 (UTC+8), the reserve ratios of various mainstream assets on the platform remain above 100%, continuously ensuring the safety of user assets with sufficient reserves and committing to 100% redemption, ensuring that users can trade and withdraw at any time. As one of the earlier platforms in the industry to continuously disclose Merkle Tree Proof of Reserves, Huobi HTX has publicly disclosed PoR data for 47 consecutive months, enhancing platform transparency in a long-term and verifiable manner.The specific updated reserve ratios are as follows: BTC (104%), ETH (102%), TRX (109%), USDs (102%), HTX (103%), XRP (104%), DOGE (101%), SOL (103%). Users can visit the "Assets - Proof of Reserves Report" page on the Huobi HTX official website to view.It is worth mentioning that starting from April this year, to further enhance the visual representation of US dollar asset reserve data, Huobi HTX has unified and aggregated USDT, USDC, and other US dollar stablecoins as "USDs" for display. The asset data of each currency remains independently recorded and verified to ensure that the reserve information is authentic, clear, and traceable.In the future, Huobi HTX will continue to adhere to the 1:1 reserve principle, using verifiable data, traceable on-chain assets, and a regular information disclosure mechanism to continuously enhance asset transparency, allowing users to see reserves, verify assets, and use them with greater peace of mind.

According to CoinGecko data, IOST's 24-hour increase exceeded 20%, reaching a maximum of $0.00089.

According to the Slow Fog Security Team, they have detected an attack activity disguised as a free VPS service, specifically targeting iPhone Safari browsers running iOS versions 18.4 to 18.6.2.The attackers exploited six vulnerabilities codenamed DarkSword to form a complete attack chain, covering aspects such as WebKit remote code execution, sandbox escape, and kernel read/write, allowing them to obtain App container files and keychain data without user awareness, and to record keyboard inputs when wallets like imToken, TokenPocket, or TronLink are in the foreground.The Slow Fog team stated that the aforementioned six vulnerabilities have now been patched by Apple, and the current attack belongs to the reuse of n-day vulnerability chains. Simply visiting a malicious page does not directly prove that mnemonic phrases or private keys have been stolen; confirmation still requires device forensics. iOS/iPadOS users are advised to upgrade their systems to version 18.7.3 or 26.3 and above as soon as possible.