server

Tin tức từ ChainCatcher, theo báo cáo của The Block, những người ủng hộ bộ xử lý thanh toán mã nguồn mở Bitcoin BTCPay Server đã cam kết thiết lập phần thưởng truy hồi: 10% số tiền được truy hồi sẽ được thưởng, nếu số tiền được truy hồi hoàn toàn thì giới hạn là 3 đồng BTC.BTCPay đã tiết lộ vào thứ Sáu tuần trước rằng một lỗ hổng nghiêm trọng đang bị khai thác tích cực, khuyến cáo người dùng nâng cấp càng sớm càng tốt. Lỗ hổng này cho phép kẻ tấn công lấy được thông tin xác thực quản trị viên LND, từ đó hoàn toàn kiểm soát ví lightning kết nối. BTCPay cho biết ví trên chuỗi (bao gồm ví nóng) không bị ảnh hưởng, không tiết lộ tổng số tiền thiệt hại và số lượng nút bị ảnh hưởng.

ChainCatcher thông báo, theo Decrypt, dự án xử lý thanh toán Bitcoin BTCPay Server cảnh báo người dùng rằng máy chủ của họ đang gặp phải một lỗ hổng nghiêm trọng đang bị tấn công chủ động, kẻ tấn công có thể lợi dụng lỗ hổng này để có quyền truy cập không được phép và dẫn đến mất mát tài chính. Yêu cầu quản trị viên ngay lập tức nâng cấp lên phiên bản 2.4.2 và xác nhận rằng chân trang máy chủ hiển thị việc cập nhật đã hoàn tất.Nếu không thể nâng cấp kịp thời, chính thức khuyên người dùng tạm thời tắt BTCPay Server để ngăn chặn các cuộc tấn công tiếp theo. Ngoài ra, BTCPay Server khuyên người dùng thay đổi các chứng chỉ macaroons có thể đã bị lộ, tạo lại tệp macaroons.db và làm mới các chuỗi xác thực của các backend mạng Lightning khác.

Tin tức từ ChainCatcher, Bitcoin News đã đăng trên nền tảng X cho biết, BTCPay Server cho biết, một lỗ hổng nghiêm trọng đang bị khai thác một cách chủ động, có thể dẫn đến mất mát tài chính. Người dùng nên ngay lập tức cập nhật lên BTCPay Server v2.4.2; những người dùng không thể cập nhật ngay lập tức nên tắt BTCPay Server của họ cho đến khi có thể cài đặt bản cập nhật, để ngăn chặn truy cập trái phép.

Tin tức từ ChainCatcher, nhà phát triển Libbitcoin @evoskuil cho biết, phiên bản mới nhất của Libbitcoin Server có thể hoàn thành việc tải xuống khối khởi đầu của nút đầy đủ Bitcoin trong vòng 55 phút và thực hiện xác minh đầy đủ. Tốc độ tăng này đến từ hệ thống xác minh chữ ký mới dựa trên GPU, hệ thống này hoạt động song song với xác minh kịch bản thông thường, thay vì thực hiện như một bước riêng biệt.Phần mềm sẽ không tạm dừng thực thi để xác minh từng chữ ký ECDSA và Schnorr, mà sẽ ghi lại kiểm tra chữ ký, thực hiện xử lý hàng loạt, và trong khi phần xác minh còn lại tiếp tục, sẽ xử lý qua GPU. @evoskuil cho biết, phương pháp này có thể đạt được tỷ lệ ghi lại chữ ký khoảng 99,5% mà không làm tắc nghẽn xác minh, do đó không cần thực hiện xác minh lần thứ hai. Nếu kiểm tra chữ ký hàng loạt thất bại, phần mềm sẽ truy ngược lại khối tương ứng và đánh dấu khối đó là không hợp lệ. Ông cũng cho biết, thiết kế này gần như có thể xử lý hàng loạt bất kỳ số lượng chữ ký nào, giúp GPU duy trì vị thế dẫn đầu so với quy trình xác minh còn lại và rút ngắn đáng kể thời gian đồng bộ hóa nút đầy đủ.

According to ZachXBT, an anonymous source shared data stolen from North Korea's internal payment servers, covering 390 accounts, chat records, and cryptocurrency transaction information.The related payment wallet addresses have received over $3.5 million from the end of November 2025 to the present, with funds transferred out through exchanges or converted into fiat currency via platforms like Payoneer and deposited into Chinese bank accounts.On-chain tracking shows that the internal payment addresses are associated with known North Korean IT worker clusters, one of which had a Tron payment address frozen by Tether in December 2025. Three affiliated companies on the user list have been sanctioned by OFAC, including Sobaeksu. ZachXBT has compiled a complete organizational chart, with data covering from December 2025 to February 2026.

According to a warning from on-chain detective ZachXBT, the Discord link for Trust Wallet (discord[.]gg/trustwallet) has been hijacked by hackers and currently points to a phishing server.ZachXBT reminds users not to join through the Discord link in official channels such as the official website, Telegram, or blog to avoid asset loss.

Last night and this morning, many netizens on social media posted that "DeepSeek is down," with issues occurring on both the web and the app. Users encountered a "server busy" message, unable to start new conversations, and some even experienced lost conversation content.Upon checking, it was found that the DeepSeek server has now been restored, and users can chat normally. According to its official website's product service status log, at 2:16 AM on the 30th, it showed that DeepSeek's web/app performance was abnormal, and the issue was under investigation; by 9:13 AM, monitoring indicated that a fix had been implemented and results were being monitored.

On March 28, the cybersecurity platform VECERT disclosed that hackers, under the name PexRat, are selling a database containing personal information of 1.5 million Binance users on the dark web. The content includes sensitive information such as names, emails, phone numbers, KYC verification status, login IP addresses, and two-factor authentication methods.Analysis indicates that this incident was not a direct intrusion into Binance's internal servers, but rather that the attackers bypassed the CAPTCHA mechanism and obtained data through credential stuffing and automated scraping methods. Affected users face a high risk of SIM card hijacking and phishing attacks. At the time of this incident, Binance's institutional OTC trading business is experiencing rapid growth, with trading volume reaching 25% of the total for the entire year of 2025 in just January and February of this year. This is another data security crisis for Binance following the leak of 420,000 sets of account credentials in January.

The crypto wallet Phantom announced the launch of the MCP server on platform X, supporting AI Agent exchange, signing, and management of all on-chain addresses supported by Phantom, and can also be used with Claude, OpenClaw, or any MCP-compatible client.

According to The Hacker News, Cyata researchers have disclosed three critical security vulnerabilities (CVE-2025-68143/44/45) in the mcp-server-git maintained by Anthropic, which can be exploited for path traversal and parameter injection, potentially leading to remote code execution.These vulnerabilities can be weaponized through prompt injection, allowing attackers to trigger the attack simply by controlling the AI assistant to read malicious content. The vulnerabilities have been patched in the versions released in September and December 2025, and the official has removed the git_init tool and enhanced path validation, recommending users to update to the latest version as soon as possible.

Three security vulnerabilities have been discovered in the official mcp-server-git maintained by Anthropic. These vulnerabilities can be exploited through prompt injection attacks, allowing attackers to trigger the vulnerabilities via malicious README files or compromised web pages without direct access to the victim's system. The vulnerabilities include: CVE-2025-68143 (unrestricted git_init), CVE-2025-68145 (path validation bypass), and CVE-2025-68144 (parameter injection in git_diff).When these vulnerabilities are combined with the file system MCP server, attackers can execute arbitrary code, delete system files, or read arbitrary file contents into the large language model context. Cyata points out that since mcp-server-git does not perform path validation on the repo_path parameter, attackers can create Git repositories in any directory on the system. Additionally, by configuring a cleanup filter in .git/config, attackers can run shell commands without execution permissions. Anthropic assigned CVE identifiers and submitted a patch on December 17, 2025. Users are advised to update mcp-server-git to version 2025.12.18 or higher.

The cryptocurrency exchange Upbit has announced that it will conduct a digital asset/deposit audit and server maintenance, and will suspend services on January 1, 2026:Server maintenance time: January 1, 2026 (Thursday) 02:00 - 08:00Korean won deposit and withdrawal suspension time: January 1, 2026 (Thursday) 02:00 - 08:00Digital asset deposit and withdrawal service suspension time: December 31, 2025 (Wednesday) 20:00 to January 1, 2026 (Thursday) 08:00

The Bitcoin mining infrastructure company Luxor announced the expansion of its hardware business from ASICs to GPUs and AI server fields, further extending its procurement, logistics, and financing capabilities to the high-growth artificial intelligence and high-performance computing (HPC) markets.Luxor stated that the core bottleneck currently faced by the industry is the actual shortage of deployable computing power, while mining companies have unique advantages in transitioning to AI data centers, including power contracts, sites, and advanced cooling systems. Since its establishment, Luxor has procured over $750 million in ASICs for Bitcoin miners, and this experience will now be extended to GPU and server procurement, providing end-to-end solutions that include new, refurbished, and used equipment.Its channels cover major manufacturers such as Dell, HPE, Lenovo, and PNY, and are supported by U.S. warehousing, international logistics, equipment installation, and hosting construction capabilities. Luxor pointed out that the global Bitcoin mining network currently has data center capacity close to 20GW, with an additional 10GW of potential expansion space, of which 35%-40% is located in the United States.As mining companies gradually shift some capacity towards AI and HPC hosting, Luxor will also adjust its service structure accordingly. As the only mining pool with comprehensive financing and hedging capabilities, Luxor can assist miners in obtaining GPU procurement funds through computing power and can provide structured financing such as sale-leaseback through partners. Additionally, its Tenki cloud computing marketplace can help operators immediately monetize computing resources once the hardware is online.Luxor stated that the company has built a full-process infrastructure network covering tax-advantaged warehousing in Montana and Delaware, OEM installation, warranty management, export control compliance, and old equipment disposal, aiming to meet the multi-billion dollar capital investment needs of customers in the AI and HPC era.

According to the official announcement, the decentralized security project Hats Finance has announced on the X platform that Hats.finance will be permanently shutting down its hosted operations, as it believes that continuing to operate a centralized user interface (UI) and servers is no longer sustainable, and there are currently no plans to adopt a new legal or operational framework to continue this hosted structure.The current arrangements are as follows: The user front-end and back-end (UI and servers) hosted by Hats.finance are expected to go offline on December 31, 2025, and most functionalities relying on this hosted structure will be gradually phased out; the Hats protocol is still deployed on-chain and managed by the DAO, with core contracts designed to run continuously as per the code.Currently, the user front-end has provided an IPFS-based version, and as long as this version is still providing services, users may access it through public gateways. However, since payments to the current fixed service providers (such as Pinata) will cease, its continued availability and performance cannot be guaranteed. Users can submit withdrawal requests through the hosted UI until December 17, after which they will need to interact directly with the contract to complete withdrawals.

ChainCatcher news, according to the official x402Scan real-time data disclosure, AIsa has continuously driven the growth of real trading volume to a high level during the testing phase (during which some Facilitators experienced downtime due to high-frequency calls).Currently, AIsa's production environment serves various AI Agents clients, including News Agents, Interview Agents, and voice education AI applications, and is achieving real-time settlement and microtransaction closed loops based on the x402 protocol by calling APIs in real-time, consuming LLM Tokens, and accessing Twitter APIs and other AI resources.Recently, AIsa launched the world's first AI resource market based on the HTTP 402 native protocol, AI Marketplace-402. AIsa is supported by Silicon Valley's renowned venture capitalist Tim Draper's Draper Associates, BoostVC, and the founder of Distributed Capital, Shen Bo.

ChainCatcher message, BscScan posted on platform X that server maintenance will be conducted on October 14, 2025, at 7:00 AM UTC, expected to last for 3 hours.During the maintenance, the website and API services may be unavailable.

ChainCatcher news, the Hong Kong listed company International Commercial Settlement Holdings Limited (00147.HK) has signed an agreement through its joint venture Keen Golden Limited with Bitmain Technologies Georgia Limited and Tecnoenergia Capital Paraguay S.A. to purchase a total of 1,863 HASH supercomputing servers, with a total price of approximately 10.87 million USD. The buyer can choose to pay in cash or with Bitcoin collateral, and the expected delivery time is by the end of September, with a one-year warranty for the servers.

ChainCatcher message, the multi-agent scheduling platform Questflow successfully unlocks the autonomous agent economy with the help of Coinbase's CDP Server Wallets and x402.As user demand for multi-agent orchestration and real-time coordination continues to grow, Questflow needs to provide secure wallets for each agent and enable on-chain payment capabilities without manual signatures, gas payments, or key management.To achieve this, Questflow introduced CDP Server Wallets to enable secure, scalable wallet creation and integrated x402 to drive on-chain autonomous payments between agents. The combination of the two brings a fast, secure wallet system and native seamless payment capabilities.Since integrating CDP Wallets v2 and x402, Questflow has processed over 130,000 autonomous microtransactions, integrated with more than 30 third-party agents (including CoinGecko, RootData, DexScreener, Notion, and X), and achieved on-chain native interactions; wallet creation and agent coordination efficiency improved by 95%; supporting real-time multi-agent workflows from DeFi strategies to social automation.With CDP Wallets and x402, Questflow has achieved a core breakthrough in the autonomous agent economy: building a scalable, secure on-chain autonomous coordination infrastructure.

ChainCatcher news reports that U.S. and international law enforcement agencies have seized 4 servers, 9 domain names, and approximately $1 million in Bitcoin, which are linked to a notorious Russian ransomware gang accused of attacking hundreds of institutions across critical sectors.The U.S. Department of Justice stated that the operation began on July 24, executed jointly by U.S. agencies along with those from Canada, Germany, Ireland, France, the UK, Ukraine, and Lithuania, targeting infrastructure associated with BlackSuit and Royal ransomware. Investigators believe that these two ransomware variants were developed by the same cybercrime group.Authorities claim that since 2022, the gang has extorted over $500 million in ransom, with a single ransom demand reaching as high as $60 million. It is alleged that they attacked more than 450 victims in the U.S. during this period, including hospitals, schools, police departments, energy companies, and government agencies, illegally profiting at least $370 million.The seized cryptocurrency was valued at $1,091,453 at the time of the seizure, originating from a digital wallet frozen by a trading platform in January 2024. According to court documents, these funds include a portion of Bitcoin ransom paid by a victim in April 2023, totaling $1.45 million.Victims of BlackSuit and Royal are typically required to pay ransoms in Bitcoin through dark web sites. Cybersecurity officials warn that operators of such malware often combine intimidation tactics with sophisticated data theft techniques, making it difficult to recover data without paying the ransom.

ChainCatcher news, Economic Observer published an article titled "Annual Returns as High as 540%? Investigation into the Chaos of Virtual Asset Investment," which points out that reporters have found that there are currently some virtual asset investment platforms active in the market that are associated with keywords such as decentralization, blockchain, and virtual assets. They package their projects using terms like blockchain technology, smart contracts, DeFi, and Defai (DeFi + AI). Many illegal projects are wrapped in concepts such as "DeFi decentralized finance," "DApp wealth management," and "stablecoin mining," but in essence, they are still fundraising and rebate activities, merely using a technological shell to disguise risks.From a legal perspective, investors need to take responsibility for their own civil legal actions, carefully identify and participate in virtual asset investment projects, and be wary of illegal activities disguised as virtual assets, without harboring any illusions.