privileges

Today, Bitget, in collaboration with media outlet Rhythm, held an online live broadcast themed "Dialogue with Bitget Executives: A Comprehensive Breakdown of the SpaceX Ticket, from Capital Privilege to Universal Sharing," providing a systematic interpretation of the product mechanisms of IPO Prime and preSPAX.Ken, the product head of Bitget IPO Prime, stated that IPO Prime is not the traditional "new coin listing," but rather utilizes digital tokens issued by the regulated issuer Republic to transform the high-threshold, low-liquidity non-standard assets of the primary market into priceable, tradable, and exit-able digital products.Ken pointed out that Pre-IPO opportunities have long been scarce, not only because the targets are of high quality but also due to the inherent high thresholds, strong circles, and low liquidity issues in the primary market. The launch of IPO Prime by Bitget aims to provide users with the opportunity to access potential economic benefits before the listing of unicorn companies through clearer product design and trading mechanisms within a compliant framework.The first phase of the preSPAX launched is an important attempt in this direction, focusing on providing users with a more flexible and tradable participation path.He further stated that from crypto trading to UEX, and now extending to the primary market, Bitget has been continuously pushing the boundaries of trading. In the future, the platform hopes to do more than just list more assets; it aims to further bridge the previously fragmented opportunity structures between different markets, allowing users to access earlier, higher quality, and more diverse global asset opportunities within the same system.

The analysis of the Drift theft incident by Slow Fog pointed out that a week before the attack, Drift adjusted its multi-signature mechanism to "2/5" (1 old signer + 4 new signers) and did not set a timelock. The attacker then gained administrator privileges, forged CVT tokens, manipulated the oracle, disabled security mechanisms, and transferred high-value assets from the liquidity pool.Currently, the stolen funds have mainly been aggregated to an Ethereum address, totaling approximately 105,969 ETH (about 226 million USD). Slow Fog stated that the flow of related funds is still being tracked.

GoPlus has released a security alert that a vulnerability in the Chrome browser allows malicious extensions to escalate privileges through the Gemini panel. Please upgrade your Chrome browser to version 143.7499.192 or above immediately.This vulnerability allows malicious extensions to control the Gemini Live panel in the Chrome browser, thereby escalating privileges to access the camera and microphone, take screenshots, access local files, and more without user consent. The vulnerability is identified as CVE-2026-0628, and Google has fixed it in the Windows/Mac versions 143.7499.192/.193 and the Linux version 143.7499.192 at the beginning of January 2026. Please check and upgrade your Chrome version immediately.

ChainCatcher message, Slow Mist team issued a security alert stating that the Zoth platform is suspected to have been attacked due to the leakage of administrator privileges, and the core logic contract has been tampered with and replaced with a malicious contract.

ChainCatcher message, according to Cyvers Alerts monitoring, the attack on Infini was due to hackers secretly retaining administrative privileges.The hackers operated from 0xc49b5e5b9da66b9126c1a62e9761e6b2147de3e1, which was originally developed as part of the Infini project for this contract. However, after the project was delivered, they secretly retained the admin privileges.

ChainCatcher news, according to the U.S. Department of the Treasury's Financial Crimes Enforcement Network (FinCEN), Binance's VIP users are granted a range of special privileges, including receiving advance notice when subject to law enforcement investigations. According to FinCEN's description, Binance VIP team members are instructed to contact the users under investigation "by all available means," including sending text messages and making phone calls to notify customers, for example, that their accounts have been frozen or unfrozen.In response, FinCEN warned Binance VIP team staff not to be too obvious in their prompts. The company told the VIP team: "According to FinCEN's orders, we must not give a strong hint or directly ask users to run/exit under any circumstances, otherwise we will be prosecuted or held personally liable. For instance, saying your account has been unlocked/your account has been investigated by XXX is usually a sufficiently obvious serious hint."According to FinCEN, Binance's internal reports indicate that in 2019, VIP customers "accounted for two-thirds to three-quarters of Binance's trading volume and trading revenue," adding that "therefore, Binance has significant commercial motivation" to go all out to support these VIP users. "Although the rules prohibit U.S. persons from trading on the platform, U.S. users "represent an important part of the VIP user group," sometimes accounting for 20% of the trading fees on the exchange platform.