openzeppelin

Согласно сообщению PR Newswire, S&P Global (NYSE: SPGI) объявила о подписании соглашения о приобретении компании OpenZeppelin, занимающейся стандартами безопасности в области финансов на блокчейне.OpenZeppelin была основана в 2015 году, ее библиотека открытых смарт-контрактов поддержала более 37 триллионов долларов США в виде трансферов стоимости, охватывающих основные стабильные монеты и токенизированные фонды по всему миру, и завершила более 900 аудитов безопасности, выявив более 10 000 уязвимостей.Это приобретение расширит возможности оценки рисков технологий на блокчейне для S&P Global, помогая создать новое поколение продуктов по оценке и бенчмаркингу безопасности на блокчейне. OpenZeppelin продолжит работать как независимое бизнес-подразделение, генеральный директор Демьян Бренер останется на своем посту и будет подчиняться президенту рейтингов S&P Global Янну Ле Паллеку. Финансовые условия сделки не раскрыты, ожидается, что она не окажет значительного влияния на финансовые результаты S&P Global.

According to The Block, OpenZeppelin co-founder Manuel Aráoz stated that he now believes "all DeFi is unsafe," and he has advised friends and family to exit all DeFi positions, including Aave, MakerDAO, and Compound.

ChainCatcher message, the secure blockchain application standard OpenZeppelin has released Solidity Contracts v5.3, with core highlights including: the new multi-token standard ERC-6909, featuring minimal implementation, metadata support, supply tracking, and content URI extension; a new proposal guardian role, added sequential proposal IDs, and new supermajority mechanism among other governance improvements.

ChainCatcher news, the secure blockchain application standard OpenZeppelin has been funded by the Ethereum Foundation. The official statement indicates that this grant will enable them to add a modular ERC-4337 implementation, advancing account abstraction and helping developers build safer applications and more flexible smart wallets. In addition, the team will introduce new signature schemes, such as secp256r1, BLS, and RSA, thereby providing broader cryptographic support.

ChainCatcher news, according to Cointelegraph, the Federal Bureau of Investigation (FBI) has been criticized for allegedly violating the terms of the MIT License in its smart contracts. X user 0xCygaar (self-identified as an AbstractChain contributor) publicly accused the agency of not properly including the required license attribution when using the OpenZeppelin library (an open-source code resource). If confirmed, this omission could constitute a violation of copyright law, as the MIT License explicitly requires that any substantial use or modification of its code includes the original license. X users claim they have warned the FBI to "take necessary measures against the FBI."The MIT License governs the use of blockchain technology, particularly within the Ethereum ecosystem. It can be distributed, modified, and used for free as long as the original license terms are followed. A public inspection of the FBI's smart contract on Etherscan shows that the code is marked as "unlicensed," sparking varied reactions from the community. The implications of the alleged violation could be serious, as the MIT License, while generally considered developer-friendly, is legally binding, and if OpenZeppelin chooses to do so, it can take legal action by sending a cease-and-desist order requiring the FBI to rectify the violation or stop using the code. However, any formal lawsuit against the FBI would face challenges due to sovereign immunity.

ChainCatcher news, a member of the Abstract Chain team @0xCygaar pointed out on the X platform that the FBI is suspected of violating the MIT License when issuing the token NexFundAI.The staff member stated that the FBI directly copied several library files from OpenZeppelin in its smart contract but failed to attach the required license declaration in the code, constituting copyright infringement. According to the MIT License, all copies or substantial portions of the software must include the license declaration.Previous news, the FBI had previously created a token called NexFundAI on Ethereum to identify and combat these suspected fraudsters and bring them to justice.

ChainCatcher message, the security agency OpenZeppelin has completed an audit of the state transition contracts in the zkSync ZK Stack codebase. This audit identified 19 issues, including 2 medium severity issues, 6 low severity issues, and 11 comments and additional information. Currently, out of the 19 issues, 18 have been resolved, and 1 has been partially resolved.

ChainCatcher news, the security agency OpenZeppelin tweeted that the Thirdweb contract vulnerability has not been exploited yet. The issue is related to the integration of specific patterns and is not related to the implementations included in the OpenZeppelin contract library. OpenZeppelin will still lead the assessment of those affected in the community and provide them with mitigation strategies, disclosing the vulnerability at the appropriate time.For Thirdweb users, the team has developed a tool to check whether the contracts created through their platform are affected and to execute migrations: https://mitigate.thirdweb.com.

ChainCatcher news, OpenZeppelin's chief contract developer Francisco Giordano announced his departure. Francisco Giordano has worked at OpenZeppelin for 6 years, and he stated that he will take a break for a while before exploring new directions.

ChainCatcher news, the security agency OpenZeppelin Contracts 5.0 has been released. This version reduces gas consumption, simplifies the codebase, integrates Defender 2.0, releases an upgrade plugin, and updates the OpenZeppelin contract guidelines, with plans to add upgrade support for Foundry later this year.

The security organization OpenZeppelin announced the launch of the developer security platform Defender 2.0, designed for coding, auditing, deploying, monitoring, and operating blockchain applications. Automated code analysis for vulnerabilities, discrepancies, improved gas costs, and test runs is directly integrated into the development workflow.It is reported that Defender 2.0 is currently in the testing phase. OpenZeppelin will provide access to existing Defender 1.0 users and new accounts upon request.

ChainCatcher news, according to official news, the security agency OpenZeppelin announced that its smart contract automation platform Defender now supports the Ethereum Layer 2 network BASE. (source link)

ChainCatcher news, Optimism announced the voting results of RetroPGF 2, which will distribute 195 grants to individuals and projects, totaling 10 million OP. The median OP received by RetroPGF 2 projects was 22,825, while the top 10% of projects will receive over 140,000 OP, with funds evenly distributed among three categories: education, infrastructure, and tools and utilities.In the education category, 70 individuals or projects were funded, with the top three recipients being L2Beat, ETHGlobal, and BuidlGuidl; the infrastructure category funded 43 projects, with the top three recipients being Protocol Guild, geth, and Solidity; the tools and utilities category funded 82 projects, with the top three recipients being OpenZeppelin, DefiLlama, and wagmi. (source link)

ChainCatcher news, according to The Block, the security firm OpenZeppelin found a total of 45 issues during its security audit of zkSync, of which the zkSync development company Matter Labs has resolved 40, including two critical issues and two medium severity issues. OpenZeppelin and Matter Labs have agreed to continue their collaboration to further enhance the long-term security of zkSync. (source link)