signature

Vitalik posted on the X platform stating the need to confirm the signer addresses of multi-signature wallets. He obtained the required information by looking up the addresses on Etherscan and using the "Read Contract" feature. If the wallet or application remains open source and can pass a "security test" (walkaway test), users will have a better experience.In common scenarios where direct use on the Safe official website is not possible, providing alternative solutions can be helpful for users. Due to privacy protection needs, such workflows may ultimately change—an equivalent privacy-friendly solution is for users to save a "view key" that contains additional private information. The block explorer can support this feature by placing the private information in the tag section of the URL, allowing it to remain in the application client. However, considering the risks of users pasting keys in URLs or web pages, more operations will still need to be completed directly through the wallet.

According to Ember Monitoring, 6 hours ago, the Ondo multi-signature wallet (0x06F...5a35) transferred 25 million ONDO, which subsequently entered five exchanges including Coinbase, OKX, Bybit, Gate, and Kucoin, with a total value of 10.19 million USD.

According to monitoring by The Data Nerd, in the past 24 hours, four addresses (0xb22...3DDa, 0x7B4...D4A4, 0xbfB...6E0a, and 0x7E7...1565) that may belong to the same whale or institution transferred all their LINK holdings to a multi-signature wallet, with a total value of approximately $12.54 million.

According to Yujin's disclosure, Kaito's multi-signature contract address distributed a total of 24 million $KAITO (approximately 13.31 million USD) to 5 addresses. One of the addresses transferred all 5 million $KAITO (approximately 2.82 million USD) received 8 hours ago to Binance.

According to PeckShieldAlert monitoring, a hacker successfully infiltrated and took control of a multi-signature wallet, stealing a total of 27.3 million dollars in assets. The hacker recently withdrew 1,000 ETH (approximately 3.24 million dollars) from Aave and laundered the money through TornadoCash.As of now, the hacker has deposited a total of 6,300 ETH (approximately 19.4 million dollars) into TornadoCash. Security analysis shows that the hacker currently holds a leveraged long position worth 9.75 million dollars, including 20.5 million dollars in ETH against 10.7 million dollars in DAI.

According to Scam Sniffer monitoring, a user lost 12 Aave Ethereum LBTC (aEthLBTC) due to signing a malicious license signature, resulting in a loss of approximately $1.08 million.Slow Mist Yu Xian stated that the phishing gang behind this attack is not mainstream and quickly converted the phishing proceeds into ETH, laundering it through Tornado Cash.

According to CertiK monitoring, the address starting with 0xc946 deposited 1,337.1 ETH (approximately 3.9 million USD) into Tornado Cash. The source of funds for this address may involve suspicious withdrawals of Wrapped ETH and Story tokens from compromised multi-signature accounts.

According to Cointelegraph, on Thursday, Aptos announced a proposal to introduce quantum-resistant signatures, AIP-137, aimed at addressing the network's reliance on digital signatures for ownership confirmation, transaction authorization, and overall security.Although existing cryptographic schemes remain secure against traditional computers, researchers warn that one day, sufficiently powerful quantum computers may be able to forge these schemes, potentially retroactively compromising account security. If the proposal passes governance review, AIP-137 will introduce SLH-DSA (a hash-based digital signature scheme standardized as FIPS 205) as an optional account signature type. This will make Aptos one of the earliest blockchains to natively support quantum-resistant accounts. However, existing accounts will remain unaffected, and quantum-resistant accounts will be available for users to choose. Previously, it was reported that Solana would collaborate with Project Eleven to build quantum-resistant signatures.

According to PeckShieldAlert monitoring, a whale user's multi-signature wallet was stolen due to private key leakage, resulting in a loss of approximately 27.3 million dollars.The hacker has laundered 12.6 million dollars (equivalent to 4,100 ETH) through TornadoCash and holds about 2 million dollars in liquid assets. In addition, the thief also controls the victim's multi-signature wallet. This wallet has a leveraged long position on the Aave platform: it has deposited 25 million dollars worth of ETH as collateral and borrowed 12.3 million DAI.

According to Cryptopolitan, Solana has partnered with quantum computing research company Project Eleven, which will conduct a comprehensive assessment of Solana's quantum resistance capabilities and create quantum-resistant digital signatures on the Solana testnet. Project Eleven has researched the risks to Solana's core infrastructure, including wallets, validators, and other cryptographic protections. The testnet will also examine the feasibility of implementing end-to-end quantum-resistant transactions on Solana.Matt Sorg, Vice President of Technology at the Solana Foundation, stated, "It is our responsibility to ensure that Solana is secure not only today but also for decades to come." Although quantum threats are currently theoretical and the blockchain may not face real threats for another decade or more, quantum research is continuously expanding. Nevertheless, Project Eleven has begun evaluating migration paths, standards, and adoption.

According to Scam Sniffer monitoring, someone lost aEthUSDT tokens worth $563,590 after signing a malicious "authorization" signature.

According to DL News, Blockstream researchers Mikhail Kudinov and Jonas Nick proposed in a revised paper published on December 5 that hash-based signature technology could be a key solution to protect the $1.8 trillion Bitcoin blockchain from the threat of quantum computers.The researchers believe that hash-based signatures are a compelling post-quantum solution because their security relies entirely on mechanisms similar to the hash function assumptions already present in Bitcoin's design. This scheme has undergone extensive cryptanalysis during the post-quantum standardization process at the National Institute of Standards and Technology (NIST), enhancing the credibility of its robustness.It is estimated that older Pay-To-Public-Key Bitcoin wallets created before 2012 (including Satoshi Nakamoto's holdings worth $98 billion) contain about $600 billion in Bitcoin, and these wallets will be the first to face the threat of quantum computers.

According to DL News, Blockstream researchers Mikhail Kudinov and Jonas Nick proposed in a published revised paper that hash-based signature technology could be the key solution to protect the $1.8 trillion Bitcoin blockchain from the threat of quantum computers.The researchers believe that hash-based signatures are a compelling post-quantum solution because their security relies entirely on mechanisms similar to the hash function assumptions already present in Bitcoin's design. This scheme has undergone extensive cryptanalysis during the National Institute of Standards and Technology (NIST) post-quantum standardization process, enhancing the credibility of its robustness. It is estimated that older Pay-To-Public-Key Bitcoin wallets created before 2012 (including Satoshi Nakamoto's holdings worth $98 billion) contain about $600 billion in Bitcoin, which will be the first to face the threat of quantum computers.

According to Jinshi Data, U.S. President Trump hinted that if the appointment letters of Federal Reserve governors appointed by former President Biden were signed by an automatic signature machine, he might seek to dismiss them. This is his latest attempt to strengthen control over the central bank. However, this move is unlikely to succeed.Trump previously claimed he would revoke the executive orders signed by Biden using an automatic signature machine, but the result was minimal aside from drawing attention. Any efforts to declare Senate-approved appointments invalid would almost certainly face legal challenges from the appointees.Nevertheless, these remarks still represent Trump's latest intrusion into the independence of the central bank.At a political rally in Pennsylvania, Trump stated, "I heard that those appointment letters might have been signed by an automatic signature machine. If it was indeed signed by an automatic signature machine—maybe I’m wrong, but we will find out."According to procedural rules, after the nominees are approved by the Senate, the president completes the appointment process by signing the appointment letters to officially establish their federal office. Trump then suggested that if the officials he appointed similarly used an automatic signature machine, he might "kick that person out." He asked Treasury Secretary Scott Bessent, who was present at the rally, to investigate the matter."Can you check on that?" Trump continued. "Scott, okay, because I heard the automatic signature machine might have signed all four, or maybe a few of them—let's check two of them. So look into this."The Federal Reserve declined to comment.

According to Reuters, former executives of Signature Bank are launching a new blockchain-based bank called N3XT, focused on facilitating instant, around-the-clock dollar payments.The bank was founded by Scott Shay, the founder and former chairman of Signature Bank, with Jeffrey Wallis, former director of digital assets and Web3 strategy, serving as CEO. N3XT will operate globally under a special purpose bank license in Wyoming and will not engage in any lending activities. Every dollar deposited at the bank will be backed by cash or short-term U.S. Treasury securities, and it will publish its reserve holdings daily. Unlike Signature Bank, N3XT will not receive Federal Deposit Insurance Corporation (FDIC) insurance. Wallis stated that N3XT plans to initially focus on digital asset clients, many of whom have already begun the onboarding process. Signature Bank previously collapsed in March 2023.

According to on-chain analyst Ai Yi (@ai_9684xtpa), the WLFI project's multi-signature address transferred 250 million $WLFI tokens to Jump Crypto, worth 40.06 million USD. The tokens have not yet been further transferred, and the specific use is still unclear.

According to Scam Sniffer monitoring, a user lost 233,913 USD of aEthWBTC due to signing a malicious "permit" signature.

According to official news, GoPlus Security Research Institute conducted a detailed security risk scan on more than 30 x402 projects and community-reported risk projects in Binance Wallet and OKX Wallet, discovering that the following projects have issues such as excessive authorization, signature replay, HonyPot (PiXiu token), and unlimited issuance risks.FLOCK (0x5ab3): The transfer ERC20 function allows the owner to withdraw any amount of any token from the contract. x420 (0x68e2): The cross chain Mint function can mint tokens without restriction. U402 (0xd2b3): The mint By Bond function allows unlimited minting of coins. MRDN (0xe57e): The withdraw Token function allows the owner to withdraw any amount of any token from the contract. PENG (0x4444ee, 0x444450, 0x444428): The manual Swap function allows the owner to withdraw ETH from the contract, and the transfer From function bypasses the allowance check for special accounts. x402 Token (0x40ff): The transfer From function bypasses the allowance check for special accounts. x402b (0xd8af5f): The manual Swap function allows the owner to withdraw ETH from the contract, and the transfer From function bypasses the allowance check for special accounts. x402MO (0x3c47df): The manual Swap function allows the owner to withdraw ETH from the contract, and the transfer From function bypasses the allowance check for special accounts.

A multi-signature wallet of the WLFI project transferred a total of 166.6 million WLFI tokens to 7 wallet addresses, worth approximately 23.74 million USD, with each wallet receiving 23.8 million WLFI tokens.All WLFI tokens of early buyers are locked.

The BNB Chain developer team announced on social media that the current BNB Chain multi-signature wallet will soon be deprecated, and users need to migrate to Safe Global to ensure asset security.