server

ChainCatcher сообщает, что, по данным The Block, сторонники открытого платежного процессора Bitcoin BTCPay Server пообещали установить вознаграждение за возврат: 10% от возвращенных средств будет выплачено в качестве вознаграждения, если сумма будет возвращена полностью, то максимальная сумма составит 3 BTC.BTCPay в прошлую пятницу раскрыла серьезную уязвимость, которая активно используется, и призвала пользователей как можно скорее обновить свои системы. Эта уязвимость позволяет злоумышленникам получить учетные данные администратора LND, что дает им полный контроль над подключенным кошельком Lightning. BTCPay заявила, что кошельки на блокчейне (включая горячие кошельки) не пострадали, и не раскрыла общую сумму убытков и количество затронутых узлов.

ChainCatcher сообщает, что по данным Decrypt, проект обработки платежей в биткойнах BTCPay Server предупреждает пользователей о серьезной уязвимости на своих серверах, которые подвергаются активной атаке. Злоумышленники могут использовать эту уязвимость для получения несанкционированного доступа и причинения финансовых потерь. Администраторам рекомендуется немедленно обновить до версии 2.4.2 и подтвердить, что в нижнем колонтитуле сервера отображается сообщение об успешном обновлении.Если обновление не может быть выполнено вовремя, официальные лица советуют пользователям временно отключить BTCPay Server, чтобы предотвратить дальнейшие атаки. Кроме того, BTCPay Server рекомендует пользователям заменить возможные скомпрометированные macaroons учетные данные, заново создать файл macaroons.db и обновить другие строки аутентификации для сети Lightning.

Сообщение ChainCatcher, Bitcoin News на платформе X сообщает, что BTCPay Server утверждает, что серьезная уязвимость активно используется, что может привести к потере средств. Пользователи должны немедленно обновиться до BTCPay Server v2.4.2; пользователи, которые не могут немедленно обновиться, должны отключить свой BTCPay Server до тех пор, пока не будет доступно обновление, чтобы предотвратить несанкционированный доступ.

Сообщение ChainCatcher, разработчик Libbitcoin @evoskuil заявил, что последняя версия Libbitcoin Server может завершить загрузку начального блока полного узла биткойна за 55 минут и провести полную проверку. Увеличение скорости связано с новой системой проверки подписей на основе GPU, которая работает параллельно с обычной проверкой скриптов, а не выполняется как отдельный шаг.Программное обеспечение не приостанавливает выполнение для проверки каждой ECDSA и Schnorr подписи, а захватывает проверку подписей, выполняет пакетную обработку и обрабатывает через GPU, пока продолжается остальная проверка. @evoskuil отметил, что этот метод обеспечивает около 99,5% коэффициент захвата подписей и не блокирует проверку, поэтому повторная проверка не требуется. Если пакетная проверка подписей не удалась, программное обеспечение отслеживает ее до соответствующего блока и помечает этот блок как недействительный. Он также отметил, что этот дизайн практически может обрабатывать любое количество подписей, позволяя GPU опережать остальной процесс проверки и значительно сокращая время синхронизации полного узла.

According to ZachXBT, an anonymous source shared data stolen from North Korea's internal payment servers, covering 390 accounts, chat records, and cryptocurrency transaction information.The related payment wallet addresses have received over $3.5 million from the end of November 2025 to the present, with funds transferred out through exchanges or converted into fiat currency via platforms like Payoneer and deposited into Chinese bank accounts.On-chain tracking shows that the internal payment addresses are associated with known North Korean IT worker clusters, one of which had a Tron payment address frozen by Tether in December 2025. Three affiliated companies on the user list have been sanctioned by OFAC, including Sobaeksu. ZachXBT has compiled a complete organizational chart, with data covering from December 2025 to February 2026.

According to a warning from on-chain detective ZachXBT, the Discord link for Trust Wallet (discord[.]gg/trustwallet) has been hijacked by hackers and currently points to a phishing server.ZachXBT reminds users not to join through the Discord link in official channels such as the official website, Telegram, or blog to avoid asset loss.

Last night and this morning, many netizens on social media posted that "DeepSeek is down," with issues occurring on both the web and the app. Users encountered a "server busy" message, unable to start new conversations, and some even experienced lost conversation content.Upon checking, it was found that the DeepSeek server has now been restored, and users can chat normally. According to its official website's product service status log, at 2:16 AM on the 30th, it showed that DeepSeek's web/app performance was abnormal, and the issue was under investigation; by 9:13 AM, monitoring indicated that a fix had been implemented and results were being monitored.

On March 28, the cybersecurity platform VECERT disclosed that hackers, under the name PexRat, are selling a database containing personal information of 1.5 million Binance users on the dark web. The content includes sensitive information such as names, emails, phone numbers, KYC verification status, login IP addresses, and two-factor authentication methods.Analysis indicates that this incident was not a direct intrusion into Binance's internal servers, but rather that the attackers bypassed the CAPTCHA mechanism and obtained data through credential stuffing and automated scraping methods. Affected users face a high risk of SIM card hijacking and phishing attacks. At the time of this incident, Binance's institutional OTC trading business is experiencing rapid growth, with trading volume reaching 25% of the total for the entire year of 2025 in just January and February of this year. This is another data security crisis for Binance following the leak of 420,000 sets of account credentials in January.

The crypto wallet Phantom announced the launch of the MCP server on platform X, supporting AI Agent exchange, signing, and management of all on-chain addresses supported by Phantom, and can also be used with Claude, OpenClaw, or any MCP-compatible client.

According to The Hacker News, Cyata researchers have disclosed three critical security vulnerabilities (CVE-2025-68143/44/45) in the mcp-server-git maintained by Anthropic, which can be exploited for path traversal and parameter injection, potentially leading to remote code execution.These vulnerabilities can be weaponized through prompt injection, allowing attackers to trigger the attack simply by controlling the AI assistant to read malicious content. The vulnerabilities have been patched in the versions released in September and December 2025, and the official has removed the git_init tool and enhanced path validation, recommending users to update to the latest version as soon as possible.

Three security vulnerabilities have been discovered in the official mcp-server-git maintained by Anthropic. These vulnerabilities can be exploited through prompt injection attacks, allowing attackers to trigger the vulnerabilities via malicious README files or compromised web pages without direct access to the victim's system. The vulnerabilities include: CVE-2025-68143 (unrestricted git_init), CVE-2025-68145 (path validation bypass), and CVE-2025-68144 (parameter injection in git_diff).When these vulnerabilities are combined with the file system MCP server, attackers can execute arbitrary code, delete system files, or read arbitrary file contents into the large language model context. Cyata points out that since mcp-server-git does not perform path validation on the repo_path parameter, attackers can create Git repositories in any directory on the system. Additionally, by configuring a cleanup filter in .git/config, attackers can run shell commands without execution permissions. Anthropic assigned CVE identifiers and submitted a patch on December 17, 2025. Users are advised to update mcp-server-git to version 2025.12.18 or higher.

The cryptocurrency exchange Upbit has announced that it will conduct a digital asset/deposit audit and server maintenance, and will suspend services on January 1, 2026:Server maintenance time: January 1, 2026 (Thursday) 02:00 - 08:00Korean won deposit and withdrawal suspension time: January 1, 2026 (Thursday) 02:00 - 08:00Digital asset deposit and withdrawal service suspension time: December 31, 2025 (Wednesday) 20:00 to January 1, 2026 (Thursday) 08:00

The Bitcoin mining infrastructure company Luxor announced the expansion of its hardware business from ASICs to GPUs and AI server fields, further extending its procurement, logistics, and financing capabilities to the high-growth artificial intelligence and high-performance computing (HPC) markets.Luxor stated that the core bottleneck currently faced by the industry is the actual shortage of deployable computing power, while mining companies have unique advantages in transitioning to AI data centers, including power contracts, sites, and advanced cooling systems. Since its establishment, Luxor has procured over $750 million in ASICs for Bitcoin miners, and this experience will now be extended to GPU and server procurement, providing end-to-end solutions that include new, refurbished, and used equipment.Its channels cover major manufacturers such as Dell, HPE, Lenovo, and PNY, and are supported by U.S. warehousing, international logistics, equipment installation, and hosting construction capabilities. Luxor pointed out that the global Bitcoin mining network currently has data center capacity close to 20GW, with an additional 10GW of potential expansion space, of which 35%-40% is located in the United States.As mining companies gradually shift some capacity towards AI and HPC hosting, Luxor will also adjust its service structure accordingly. As the only mining pool with comprehensive financing and hedging capabilities, Luxor can assist miners in obtaining GPU procurement funds through computing power and can provide structured financing such as sale-leaseback through partners. Additionally, its Tenki cloud computing marketplace can help operators immediately monetize computing resources once the hardware is online.Luxor stated that the company has built a full-process infrastructure network covering tax-advantaged warehousing in Montana and Delaware, OEM installation, warranty management, export control compliance, and old equipment disposal, aiming to meet the multi-billion dollar capital investment needs of customers in the AI and HPC era.

According to the official announcement, the decentralized security project Hats Finance has announced on the X platform that Hats.finance will be permanently shutting down its hosted operations, as it believes that continuing to operate a centralized user interface (UI) and servers is no longer sustainable, and there are currently no plans to adopt a new legal or operational framework to continue this hosted structure.The current arrangements are as follows: The user front-end and back-end (UI and servers) hosted by Hats.finance are expected to go offline on December 31, 2025, and most functionalities relying on this hosted structure will be gradually phased out; the Hats protocol is still deployed on-chain and managed by the DAO, with core contracts designed to run continuously as per the code.Currently, the user front-end has provided an IPFS-based version, and as long as this version is still providing services, users may access it through public gateways. However, since payments to the current fixed service providers (such as Pinata) will cease, its continued availability and performance cannot be guaranteed. Users can submit withdrawal requests through the hosted UI until December 17, after which they will need to interact directly with the contract to complete withdrawals.

ChainCatcher news, according to the official x402Scan real-time data disclosure, AIsa has continuously driven the growth of real trading volume to a high level during the testing phase (during which some Facilitators experienced downtime due to high-frequency calls).Currently, AIsa's production environment serves various AI Agents clients, including News Agents, Interview Agents, and voice education AI applications, and is achieving real-time settlement and microtransaction closed loops based on the x402 protocol by calling APIs in real-time, consuming LLM Tokens, and accessing Twitter APIs and other AI resources.Recently, AIsa launched the world's first AI resource market based on the HTTP 402 native protocol, AI Marketplace-402. AIsa is supported by Silicon Valley's renowned venture capitalist Tim Draper's Draper Associates, BoostVC, and the founder of Distributed Capital, Shen Bo.

ChainCatcher message, BscScan posted on platform X that server maintenance will be conducted on October 14, 2025, at 7:00 AM UTC, expected to last for 3 hours.During the maintenance, the website and API services may be unavailable.

ChainCatcher news, the Hong Kong listed company International Commercial Settlement Holdings Limited (00147.HK) has signed an agreement through its joint venture Keen Golden Limited with Bitmain Technologies Georgia Limited and Tecnoenergia Capital Paraguay S.A. to purchase a total of 1,863 HASH supercomputing servers, with a total price of approximately 10.87 million USD. The buyer can choose to pay in cash or with Bitcoin collateral, and the expected delivery time is by the end of September, with a one-year warranty for the servers.

ChainCatcher message, the multi-agent scheduling platform Questflow successfully unlocks the autonomous agent economy with the help of Coinbase's CDP Server Wallets and x402.As user demand for multi-agent orchestration and real-time coordination continues to grow, Questflow needs to provide secure wallets for each agent and enable on-chain payment capabilities without manual signatures, gas payments, or key management.To achieve this, Questflow introduced CDP Server Wallets to enable secure, scalable wallet creation and integrated x402 to drive on-chain autonomous payments between agents. The combination of the two brings a fast, secure wallet system and native seamless payment capabilities.Since integrating CDP Wallets v2 and x402, Questflow has processed over 130,000 autonomous microtransactions, integrated with more than 30 third-party agents (including CoinGecko, RootData, DexScreener, Notion, and X), and achieved on-chain native interactions; wallet creation and agent coordination efficiency improved by 95%; supporting real-time multi-agent workflows from DeFi strategies to social automation.With CDP Wallets and x402, Questflow has achieved a core breakthrough in the autonomous agent economy: building a scalable, secure on-chain autonomous coordination infrastructure.

ChainCatcher news reports that U.S. and international law enforcement agencies have seized 4 servers, 9 domain names, and approximately $1 million in Bitcoin, which are linked to a notorious Russian ransomware gang accused of attacking hundreds of institutions across critical sectors.The U.S. Department of Justice stated that the operation began on July 24, executed jointly by U.S. agencies along with those from Canada, Germany, Ireland, France, the UK, Ukraine, and Lithuania, targeting infrastructure associated with BlackSuit and Royal ransomware. Investigators believe that these two ransomware variants were developed by the same cybercrime group.Authorities claim that since 2022, the gang has extorted over $500 million in ransom, with a single ransom demand reaching as high as $60 million. It is alleged that they attacked more than 450 victims in the U.S. during this period, including hospitals, schools, police departments, energy companies, and government agencies, illegally profiting at least $370 million.The seized cryptocurrency was valued at $1,091,453 at the time of the seizure, originating from a digital wallet frozen by a trading platform in January 2024. According to court documents, these funds include a portion of Bitcoin ransom paid by a victim in April 2023, totaling $1.45 million.Victims of BlackSuit and Royal are typically required to pay ransoms in Bitcoin through dark web sites. Cybersecurity officials warn that operators of such malware often combine intimidation tactics with sophisticated data theft techniques, making it difficult to recover data without paying the ransom.

ChainCatcher news, Economic Observer published an article titled "Annual Returns as High as 540%? Investigation into the Chaos of Virtual Asset Investment," which points out that reporters have found that there are currently some virtual asset investment platforms active in the market that are associated with keywords such as decentralization, blockchain, and virtual assets. They package their projects using terms like blockchain technology, smart contracts, DeFi, and Defai (DeFi + AI). Many illegal projects are wrapped in concepts such as "DeFi decentralized finance," "DApp wealth management," and "stablecoin mining," but in essence, they are still fundraising and rebate activities, merely using a technological shell to disguise risks.From a legal perspective, investors need to take responsibility for their own civil legal actions, carefully identify and participate in virtual asset investment projects, and be wary of illegal activities disguised as virtual assets, without harboring any illusions.