Analysis of EIDOS Mining Attacks: Developers should self-examine potential security risks when launching CPU payment tools

星球日报讯 昨天晚间19:04-23:29之间,PeckShield安全盾风控平台DAppShield监测到黑客向EOS竞猜类游戏BigGame发起连续攻击,利用其新推出的CPU代付功能进行恶意挖矿,致使其CPU资源被耗尽,共计获得1,993个EIDOS代币。 PeckShield安全人员分析发现,BigGame新上线的CPU代付功能,存在可劫持转账通知发起内联操作的缺陷,使得其CPU可被恶意控制。随着EIDOS的持续火热,不少数字钱包或DApp都相继开发了一键挖矿功能,通过智能化程序帮助用户自动实施转账操作,但一旦存在潜在安全风险的话,该辅助工具便会成为攻击者的帮凶,致使普通用户体验受到伤害。PeckShield在此提醒广大开发者,若已上线CPU代付功能的话应自查潜在安全风险,避免因恶意攻击造成普通用户使用体验受损,必要时可寻求第三方安全公司协助,帮助其完成新功能上线前攻击测试及基础安全防御部署。
最热快讯
Kalshi Plans to List Perpetual Securities Futures Anchored to U.S. Stocks and ETF Spot
Odaily News: Kalshi has submitted a proposed rule change to the U.S. Securities and Exchange Commission, proposing to add Chapter 14 to its rulebook in order to list perpetual securities futures products with no fixed expiration date. These contracts anchor their prices near the spot price of the underlying U.S. stock or ETF through periodic funding rates between long and short parties, and are planned to be cleared by its clearing platform Kalshi Klear.The underlying assets must meet conditions including deliverable supply exceeding 20 million shares, a market capitalization of at least $100 billion, and an average daily trading volume of at least $450 million over the past 6 months, with most contract units being 100 shares.
Trump's latest financial disclosure shows his accounts purchased Strategy stock twice in July, with the largest single purchase at $100,000
According to a periodic transaction report recently released by the U.S. Office of Government Ethics (OGE), accounts held in U.S. President Trump's name purchased Strategy (MSTR) stock twice, on July 24 and July 27, with transaction amounts of $1,001 to $15,000 and $50,001 to $100,000, respectively. In addition, the accounts sold MSTR worth $1,001 to $15,000 on July 8. Reports note that MSTR's stock price has risen approximately 83% since July 24.The White House previously stated that the relevant stock and bond assets are traded through a discretionary account managed by a third-party institution and are not directly operated by Trump himself; since Trump is the beneficiary of the accounts, the relevant transactions are still disclosed in his name. (Bitcoin Treasuries)
Hyperliquid LIT's largest short is still "holding firm" on its short position, with unrealized losses exceeding $10 million
Odaily News: According to Hyperbot data, as LIT broke through $5.3 to set a new all-time high, the largest LIT short position on Hyperliquid — a 3x leveraged LIT short that has been "holding firm" — has seen its unrealized losses further widen. The position still holds 2.528 million LIT, with unrealized losses reaching $10.118 million.In addition, the whale also holds short positions in AVAX, ETH, SOL, and HYPE, with the overall position value amounting to approximately $14.634 million, and a return on investment of approximately negative 139.6%.
BTC falls below 86,000 USDT, down 0.33% in 24H
According to OKX market data, BTC has fallen below 86,000 USDT and is currently trading at 85,960.3 USDT, down 0.33% in 24H.
A whale heavily invested in $4.5 million worth of Robinhood Meme and DeFi leaders has liquidated PONS, incurring a loss of approximately $200,000
Odaily News: According to on-chain analyst Aunt Ai's monitoring, a certain whale sold 5.338 million PONS at an average price of $0.6779, worth $3.67 million, driving the PONS price down 4% from $0.6968 to $0.6688. PONS was previously the largest on-chain asset of this address, with an entry price of approximately $0.7154. This sale resulted in a loss of about $200,000.
Former Hack VC partner Hsin-Ju found dead in California at age 37
Odaily News: Crypto industry figure Jordy posted on X platform that former Hack VC partner Hsin-Ju Chuang has been found dead, and expressed condolences. According to a screenshot of a report shared by Jordy, 37-year-old Hsin-Ju Chuang resided in North Las Vegas and was found dead last month near a remote exit off Interstate 15 in the Mojave Desert. Investigators have not yet determined the cause of death.Hsin-Ju previously claimed that she was required to continue working during a medical emergency and was threatened with being blacklisted from the industry if she left before an event was completed. She rejected Hack VC's settlement offer and had planned to publicly release evidence related to her tenure on August 26. Hack VC stated that it has noticed the relevant content, is concerned about Hsin-Ju's health condition, but said that its understanding of the events differs significantly from what Hsin-Ju published, and that it would not publicly discuss details out of privacy considerations.
资讯热榜
日榜
周榜
Trump: I believe we will reach a deal with Iran after the U.S. midterm elections
Anthropic: Claude Sonnet 5.5 and Claude Haiku 5.5 to Be Released in the Coming Weeks
MUBARAK and MARSCOIN rose briefly, with MUBARAK posting a 24H gain of 52%
Kalshi requests CFTC to allow margin trading on its platform
Or, affected by the news of Binance's $100 million investment, Circle turned from decline to gain in pre-market trading
Federal Reserve's Collins: Rate hike will help inflation return to target
BTC breaks above 87,000 USDT, up 1.72% in 24H
Robinhood-listed MONITOR market cap briefly surpassed $13 million, continuing to hit a new all-time high
ZEC briefly broke through 1,650 USDT to hit a new all-time high, up 10% in 24H
Nasdaq 100 Index extends gains to 0.6%, on track to close at a record high