频道

CryptoPulse 安全快讯

AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s Digest
（Cointelegraph）

Similar to the Hugging Face hack, Ethereum researchers have set up an AI Agent message board to help rescue the Glamsterdam fork.… Cointelegraph AI Agents Rescue ETH’s Glamsterdam Fork, ‘Steal My Bitcoin’ Site: Hodler’s Digest

CryptoPulse 安全快讯

Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed
（Cryptoslate）

Bitquery linked failed exits to depleted backing for Initia balances as the project outlined a patch and ongoing recovery work. R… CryptoSlate Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed

CryptoPulse 安全快讯

Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed
（Cryptoslate）

Bitquery linked failed exits to depleted backing for Initia balances as the project outlined a patch and ongoing recovery work. R… CryptoSlate Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed

New on Onchain Diary

Keystone's Breach Leaked Shipping Addresses, Not Seed Phrases. That Is Still Bad.

Keystone says a third party took names, addresses and order details after unauthorised access on Oct 20. No seed or card data. What to do now.

https://theonchaindiary.com/articles/keystone-customer-data-breach-shipping-addresses/ Onchain Diary Keystone Data Breach: Customer Addresses Leaked

链上日记 · 新篇

Keystone 被入侵的是商城，不是钱包：泄露的是收货地址、手机号和订单明细

Keystone 官网遭未授权访问，第三方拿走客户姓名、联系方式、收货地址与订单明细。助记词、私钥与银行卡信息不在泄露范围。已确认与未确认事实，以及你现在该做的几件事。

中文版 https://theonchaindiary.com/zh/articles/keystone-customer-data-breach-shipping-addresses/
English https://theonchaindiary.com/articles/keystone-customer-data-breach-shipping-addresses/ Onchain Diary Keystone 数据泄露：客户收货信息被拿走

New on Onchain Diary

The Initia Hack: A Chain Halted Itself Mid-Attack as an 'Infinimint' Exploit Bridged Out $2.7M

Initia halted its L1 and all rollups on Oct 23 after an attacker spoofed MoveVM state, credited himself unbacked tokens and bridged ~$2.7M in WETH, AUSD0 and…

https://theonchaindiary.com/articles/initia-halt-mint-exploit-explained/ Onchain Diary Initia Hack: L1 Halted After $2.7M Mint Exploit

链上日记 · 新篇

Initia 被黑复盘：一条 L1 为什么把自己整条链停了，270 万美元的「无限铸币」是怎么跑出去的

Initia 于 10 月 23 日 15:41 UTC 紧急停掉 L1 和全部 Rollup。攻击者伪造 MoveVM 状态无背书记入资产并桥出约 270 万美元 WETH/AUSD0/USDC，官方已点明脚本缓存 bug，完整复盘未出。已确认与未确认的事实清单。

中文版 https://theonchaindiary.com/zh/articles/initia-halt-mint-exploit-explained/
English https://theonchaindiary.com/articles/initia-halt-mint-exploit-explained/ Onchain Diary Initia 被黑复盘：一条 L1 为什么把自己整条链停了，270 万美元的「无限铸币」是怎么跑出去的

New on Onchain Diary

Keystone's Breach Leaked Shipping Addresses, Not Seed Phrases. That Is Still Bad.

Keystone says a third party took names, addresses and order details after unauthorised access on Oct 20. No seed or card data. What to do now.

https://theonchaindiary.com/articles/keystone-customer-data-breach-shipping-addresses/ Onchain Diary Keystone Data Breach: Customer Addresses Leaked

链上日记 · 新篇

Keystone 被入侵的是商城，不是钱包：泄露的是收货地址、手机号和订单明细

Keystone 官网遭未授权访问，第三方拿走客户姓名、联系方式、收货地址与订单明细。助记词、私钥与银行卡信息不在泄露范围。已确认与未确认事实，以及你现在该做的几件事。

中文版 https://theonchaindiary.com/zh/articles/keystone-customer-data-breach-shipping-addresses/
English https://theonchaindiary.com/articles/keystone-customer-data-breach-shipping-addresses/ Onchain Diary Keystone 数据泄露：客户收货信息被拿走

New on Onchain Diary

The Initia Hack: A Chain Halted Itself Mid-Attack as an 'Infinimint' Exploit Bridged Out $2.7M

Initia halted its L1 and all rollups on Oct 23 after an attacker spoofed MoveVM state, credited himself unbacked tokens and bridged ~$2.7M in WETH, AUSD0 and…

https://theonchaindiary.com/articles/initia-halt-mint-exploit-explained/ Onchain Diary Initia Hack: L1 Halted After $2.7M Mint Exploit

链上日记 · 新篇

Initia 被黑复盘：一条 L1 为什么把自己整条链停了，270 万美元的「无限铸币」是怎么跑出去的

Initia 于 10 月 23 日 15:41 UTC 紧急停掉 L1 和全部 Rollup。攻击者伪造 MoveVM 状态无背书记入资产并桥出约 270 万美元 WETH/AUSD0/USDC，官方已点明脚本缓存 bug，完整复盘未出。已确认与未确认的事实清单。

中文版 https://theonchaindiary.com/zh/articles/initia-halt-mint-exploit-explained/
English https://theonchaindiary.com/articles/initia-halt-mint-exploit-explained/ Onchain Diary Initia 被黑复盘：一条 L1 为什么把自己整条链停了，270 万美元的「无限铸币」是怎么跑出去的

CryptoPulse 日报 · 10-25

安全 · 24h
· X100 Exploit Proceeds Split Into Four 400-ETH Wallets（TheDefiant）
· Agora Says Initia Exploit Hit Third-Party Product Using AUSD（TheDefiant）
· CoinDCX Absorbs Losses, Credits Users After Failed Sweep of Hacked Deposit Addresses（Unchained）

叙事与项目 · 24h
· A hash-only rollup: OP Stack L2 accounts as Lamport-style hash chains, no ECDSA inside th…（ETHResearch）
· Firedancer makes bounty hunters burn 1 SOL even for duplicate bug reports（Cryptoslate）
· Circle’s new USDC auctions let institutions collect the fees others pay to cash out（Cryptoslate）

监管与宏观 · 24h
· Crypto longs lose $404 million in four hours as bitcoin briefly slips below $80,000（TheBlock）
· Strategy, Strive face balancing act between bitcoin buying and preferred stock dividends（CoinDesk）
· Ether Falls Below $2,300 as 28-Day Loss Reaches 14.7%（TheDefiant）

今日日历
· ETH Hoodi Glamsterdam fork（协议升级）

28+ 源自动精选 · 不构成投资建议

Jask的链上观察 · 早盘 10-25

BTC $80,783 ▲ 0.2%
ETH $2,359 ▼ 0.6%
BNB $742 ▲ 0.9%
XRP $1.30 ▲ 1.6%
SOL $102 ▲ 0.3%
TRX $0.3290 ▼ 0.2%
ZEC $1,207 ▲ 3.4%

恐惧贪婪指数：54（Neutral）
BTC 占比：60.1% · ETH 10.7%
前 100 广度：23 涨 / 34 跌
资金费率：BTC +0.003% ETH +0.001% SOL +0.002%
BTC 技术面：RSI 46（中性）· 多头排列 · MACD 死叉 · 52周分位 59%

价格 CoinMarketCap · 指数 alternative.me · 不构成投资建议

CryptoPulse 安全快讯

Electrum Patches Wallet Flaw Exploited Through Malicious Servers
（TheDefiant）

A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Develope… thedefiant.io

CryptoPulse 安全快讯

X100 Exploit Nets 4.85 Million USDT After Governance Takeover
（TheDefiant）

Two transactions turned treasury tokens and liquidity positions into USDT; Blockaid warned that the Ethereum attack was ongoing. thedefiant.io

CryptoPulse 安全快讯

Electrum Patches Wallet Flaw Exploited Through Malicious Servers
（TheDefiant）

A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Develope… thedefiant.io

CryptoPulse 安全快讯

Third X100 Exploit Transaction Pulls 550,000 X From Uniswap Pool
（TheDefiant）

A different sender routed about 549,916 X and 1,909 USDT to a new beneficiary, while the affected pool held less than 200 USDT. thedefiant.io

CryptoPulse 安全快讯

Third X100 Exploit Transaction Pulls 550,000 X From Uniswap Pool
（TheDefiant）

A different sender routed about 549,916 X and 1,909 USDT to a new beneficiary, while the affected pool held less than 200 USDT. thedefiant.io

CryptoPulse 安全快讯

X100 治理接管后利用漏洞获利 485 万 USDT
（TheDefiant）

两笔交易将国库代币和流动性头寸换成USDT；Blockaid警告以太坊攻击仍在进行中。 thedefiant.io

CryptoPulse 日报 · 10-24

安全 · 24h
· CoinDCX Absorbs Losses, Credits Users After Failed Sweep of Hacked Deposit Addresses（Unchained）

叙事与项目 · 24h
· Swell Freezes swETH and rswETH Withdrawals Until It Corrects Their Exchange Rates（Unchained）
· Ali Yahya Is Leaving a16z as Its Crypto Arm Becomes a16z Frontier and Opens to AI（Unchained）
· New York Asks Court for a $1.37 Billion Judgment Against NovaTech s Founders（Unchained）

监管与宏观 · 24h
· Bitcoin ETFs Lose Over $635M In One Day Following Oil Price Spike（BitcoinMagazine）
· Wells Fargo, Arm, Intuit Keep Their Stock Off OKX-ICE Token Venue as Objections Reach 22（Unchained）
· Ether ETFs Are Having Their Worst Month of 2026. Who Buys Once Bitmine Stops?（Unchained）

28+ 源自动精选 · 不构成投资建议

Jask的链上观察 · 早盘 10-24

BTC $80,589 ▼ 0.9%
ETH $2,370 ▼ 0.9%
BNB $735 ▲ 0.5%
XRP $1.28 ▼ 2.1%
SOL $102 ▼ 1.7%
TRX $0.3295 ▲ 0.4%
ZEC $1,168 ▼ 4.5%

恐惧贪婪指数：51（Neutral）
BTC 占比：60.1% · ETH 10.7%
前 100 广度：6 涨 / 68 跌
资金费率：BTC +0.008% ETH +0.002% SOL +0.004%
BTC 技术面：RSI 44（中性）· 多头排列 · MACD 死叉 · 52周分位 58%

价格 CoinMarketCap · 指数 alternative.me · 不构成投资建议

CryptoPulse 安全快讯

Agora 冻结 Initia 攻击相关 AUSD 账户
（TheDefiant）

Agora 称其在 Initia 上并无合约；目标 Ethereum 账户此前已将 1.4 million AUSD 兑换为 ETH thedefiant.io

New on Onchain Diary

The NEM Token Hack: A Sell-Tracking Bug Let an Attacker Drain a PancakeSwap Pool 42 Times

The NEM (NemTokenV2) token on BNB Chain lost $821,920 to a contract logic flaw. How the pendingLpSellRecycle accounting bug was looped 42 times against…

https://theonchaindiary.com/articles/nem-token-contract-exploit-explained/ Onchain Diary NEM Token Hack: How NemTokenV2 Lost $821K

链上日记 · 新篇

NEM 代币被掏 82 万美元复盘：一个「卖出追踪」记账漏洞被连刷 42 次

BNB Chain 上的 NEM（NemTokenV2）因合约逻辑漏洞损失 821,920 美元。pendingLpSellRecycle 记账缺陷如何被攻击者循环利用，42 次抽干 PancakeSwap 流动性池。

中文版 https://theonchaindiary.com/zh/articles/nem-token-contract-exploit-explained/
English https://theonchaindiary.com/articles/nem-token-contract-exploit-explained/ Onchain Diary NEM 代币被掏 82 万美元复盘：一个「卖出追踪」记账漏洞被连刷 42 次

CryptoPulse 安全快讯

Initia 遭漏洞攻击据报道被抽走超 $2.6M 区块链网络已暂停
（Cointelegraph）

安全研究人员发现未授权代币铸造及mil…，该区块链暂停layer-1网络和rollups Cointelegraph Initia Exploit: Reports of Hackers Minting Tokens, Moving Millions to Ethereum

CryptoPulse 安全快讯

Agora 称 Initia 遭攻击，系使用 AUSD 的第三方产品所致
（TheDefiant）

以太坊记录显示 140 万枚 AUSD 流出桥接适配器，Agora 称未在 Initia 上部署任何智能合约 thedefiant.io

CryptoPulse 安全快讯

Agora冻结与Initia漏洞攻击相关的AUSD账户
（TheDefiant）

Agora 称其在 Initia 上并无合约；被针对的以太坊账户此前已将 1.4 million AUSD 兑换成 ETH thedefiant.io

New on Onchain Diary

The Fearless Wallet Hack: A Backdoor Hid in the Extension's Open Source for 20 Months

The Fearless Wallet browser extension sent private keys to an attacker server for 20 months. How the TON-camouflaged backdoor worked and what victims should do.

https://theonchaindiary.com/articles/fearless-wallet-extension-key-leak-explained/ Onchain Diary Fearless Wallet Hack: Extension Leaked Private Keys

链上日记 · 新篇

Fearless 钱包插件私钥外传复盘：藏在开源仓库里 20 个月的后门

Fearless 浏览器钱包插件连续 20 个月把用户私钥发给攻击者服务器。伪装成 TON 功能的后门如何运作、受害面多大、用户现在该做什么。

中文版 https://theonchaindiary.com/zh/articles/fearless-wallet-extension-key-leak-explained/
English https://theonchaindiary.com/articles/fearless-wallet-extension-key-leak-explained/ Onchain Diary Fearless 钱包插件私钥外传复盘：藏在开源仓库里 20 个月的后门

CryptoPulse 安全快讯

Initia Halts L1 and Rollups After Reported Mint Exploit
（TheDefiant）

Analyst Spreek estimated $2.6 million had been cashed out; Ethereum records show stablecoin swaps and a later 1,135.5 ETH transfe… thedefiant.io