According to Odaily monitoring, the Global Cybersecurity Alliance (GCSA) has released three independent technical investigation reports, disclosing multiple recent digital asset security risks. Attackers impersonated security@ku.com to trick users into downloading remote control programs. GCSA found that the relevant domain had not previously been configured with DMARC; after notification, KuCoin has completed remediation and enabled a DMARC quarantine policy. After the original version of the MCP toolkit referenced in Bitkub's official documentation was taken down, a third party re-registered the npm package name. Installation methods without pinned versions and the risk of plaintext keys may lead to credential leakage. There is currently no evidence of actual theft, and Bitkub has not yet responded to the notification. Within the Avalanche ecosystem, the TranchePool vault was attacked due to a flaw in its cross-day settlement logic. The attacker exploited flash loans and repeated withdrawals to transfer out approximately 1.0134 million USDC within 202 seconds. This incident is an upper-layer application vulnerability, and the underlying network was not affected. GCSA stated that it has reported the leads to the relevant platforms and published the original analysis and evidence for industry reference.

Odaily: Document platform GitBook disclosed that on November 2 it suffered a targeted cyberattack carried out using AI agents, in which attackers gained unauthorized access to some of its infrastructure credentials. GitBook said it immediately detected and contained the intrusion, and that there is no evidence that hosted content was modified.Potentially affected information includes integration tokens, Git Sync keys, API tokens, and questions users submitted to the GitBook AI assistant. GitBook has revoked customer API tokens and is requiring users to rotate credentials related to GitBook and third-party services; users of its MCP server need to re-authenticate.Decentralized exchange PancakeSwap had proactively taken its documentation offline and stated that its own systems and applications were unaffected. The exchange subsequently migrated its documentation to its own infrastructure and restored access, with existing documentation links still usable. (Decrypt)

Odaily Report: Tether has expanded its Wallet Development Kit (WDK) with a new command-line wallet and MCP interface designed for AI agents. The same local wallet daemon can be operated by users via the terminal or controlled by AI-compatible software through the Model Context Protocol. The tool is currently in beta, and Tether recommends using it with caution.

Odaily reports that Bitcoin News posted on X platform that the x402 Foundation has incorporated the Lightning Network payment specification into its open internet payment standards. x402 was initially developed by Coinbase, aiming to enable AI agents and applications to automatically complete payments and continue executing tasks upon receiving a "402 Payment Required" response, without needing to create accounts, enter credit card information, or manage API subscriptions.The protocol is now governed by the Linux Foundation, with participation from companies such as Cloudflare, Google, AWS, Visa, Mastercard, Stripe, and American Express. With the integration of the Lightning Network, AI agents can use satoshis to pay for API calls, data, computing power, MCP tools, and other digital resources, and cryptographically prove payment through Lightning Network preimages.

Odaily News: AI Agent onchain operating system (AI Agent Onchain OS) X-Agent has released its latest whitepaper, systematically introducing its product architecture, MCP ecosystem, business model, and the use cases of $XAGT.The whitepaper points out that the next phase of the AI industry is not just about generating text, images, or code, but about enabling Agents to understand user intent, invoke tools, execute tasks, and complete transactions. Centered around the philosophy of "Speak to Build, Share to Connect," X-Agent allows users to create AI Agents with context, memory, skills, API, and wallet connectivity capabilities through natural language, without writing any code.In terms of business model, X-Agent aims to connect the full chain of Agent creation, MCP capability integration, distribution, payment, and monetization. Developers can package APIs, data, and professional services into MCP capabilities and earn revenue through pay-per-call, subscriptions, or transaction commissions.$XAGT is planned to be used for computing costs of secure runtime environments, LLM and API calls, Agent transaction settlement, MCP service payments, Premium Agent template purchases, and developer deployment. In the future, it will also expand to service staking, multi-Agent settlement, and ecosystem governance scenarios.According to the project team, X-Agent currently has over 1 million registered users, has completed over 1.1 million autonomous tasks cumulatively, and has consumed over 84 billion LLM Tokens. In the future, the project will also advance Super-Agent, enterprise sandbox, decentralized Agent Store, and multi-Agent collaboration systems.

Odaily News: Aave has launched an official MCP server, allowing AI agents to access real-time protocol data and prepare transactions on Aave V3 and V4. The server is compatible with ChatGPT, Claude, and other MCP-compatible tools, while users retain control over transaction signing.

Odaily News – While "Vibe Coding" has enabled more people to generate applications using natural language, the next competitive frontier for AI Agents is shifting toward a harder challenge: how to truly accomplish a real-world task that spans multiple platforms and services, involving budgets and authorizations.In X-Agent's latest Medium article, "Beyond Vibe Coding, Toward Agentic Execution," the team uses "booking a trip to Tokyo" as an example to outline its exploration of Agentic Execution. Users would no longer need to switch back and forth between flight, hotel, and payment pages; instead, they would initiate the task with a single request, and the AI would coordinate search, comparison, confirmation, and subsequent execution. Throughout the process, the user retains control over destination, budget, terms, and final authorization.However, the gap between "recommending options" and "delivering reliable execution" still involves a whole set of infrastructure challenges. Price fluctuations, login verifications, order timeouts, and partially successful bookings all require the Agent to preserve task state, distinguish between confirmed and unconfirmed results, and pause to re-request user authorization when needed—rather than blindly retrying or spending automatically.To address this direction, X-Agent proposes decoupling and coordinating four types of capabilities—conversation, task, execution, and events—while exploring different execution pathways such as WebMCP, APIs, MCP tools, browser automation, and Computer Use. The core principle is: tools can help Agents act, but they must not bypass user permissions, budget limits, or result verification.X-Agent notes that the article currently describes a product direction still under exploration and validation, rather than a general-purpose booking capability that has already been launched. The goal is to advance AI from "understanding and generating" toward "completing tasks under user control," gradually making natural language a new gateway connecting real-world services with digital execution.

Odaily News – According to official sources, the OKX AI Builder co-building program has been officially launched and is now open for applications. Developers can integrate OKX market data, trading, and account capabilities via MCP, CLI, or API to embed trading functionality into their own AI products. Once users complete trades through a Builder project, the Builder shares fee revenue with OKX, with rebate rates reaching up to 50%. Trades from both new and existing users count toward rebate eligibility.

Odaily News: The suite covers over 60 EVM-compatible chains and provides AI agents with structured, verified, real-time on-chain data access through three methods: MCP, CLI, and Skills. Etherscan MCP supports programming agents like Claude and Codex in querying on-chain information via natural language; the CLI tool outputs results in JSON, table, or CSV format in the terminal and comes with an interactive interface; the Skills module includes built-in features such as Orchestrator, contract auditing, transaction debugging, and workflow orchestration. Etherscan stated that developers can refer to the official documentation to use these tools and can submit feedback or share applications built on top of them.

Odaily News - Coinbase has disclosed the architecture and application of its internal AI system "CEEcil." This system is not a simple chatbot but is designed as an AI agent that functions like a "team member." It can be mentioned in Slack, and possesses long-term memory, proactive follow-up, and judgment capabilities.CEEcil retains team context through a three-tier memory mechanism: in the background, it continuously extracts information such as decisions, blocked items, and owners from authorized channels; each night, it consolidates short-term observations into long-term summaries; and when answering questions, it retrieves historical memories, recent conversations, and real-time data on demand. The system also adopts a tiered model architecture, where simple queries are prioritized for processing via APIs or knowledge bases, and only complex, multi-step tasks are delegated to more powerful AI models, thereby reducing cost and latency.In practical applications, CEEcil can proactively join relevant Slack discussions, send emoji reactions, and automatically follow up when issues go unaddressed. Coinbase states that the system also once refused to submit operational documents containing customer identity information to Git, suggesting the use of redacted versions or compliant storage methods instead—demonstrating a certain level of security judgment.Architecturally, CEEcil consists of a Go service and an AI agent runtime, and connects to tools such as memory retrieval, knowledge bases, real-time queries, and Slack via MCP. Coinbase also has set up a real-time "kill switch," call limits and spending caps, audit mechanisms, and requires human review and merging of the code it generates.Coinbase says CEEcil is now able to help teams handle production incidents and answer expert knowledge that previously would have required waiting hours to obtain. In the future, the company hopes to expand this model into multiple AI agents tailored to specific teams, enabling AI not only to "answer questions" but also to continuously remember, proactively participate, and complete actual work.