Lookonchain APP

App Store

SlowMist Issues Security Advisory for Potential New Risks After Ethereum Pectra Upgrade

2025.05.08 19:24:32

On May 8th, the cybersecurity firm SlowMist published a post regarding the potential new risks brought about by the Ethereum Pectra upgrade: For users: The protection of private keys should always be a top priority. Be aware that the contract code at the same address on different chains may not always be the same. Before taking any action, understand the detailed information of the delegated target. For wallet providers: Check if the delegated chain matches the current network. Remind users to be cautious of the risk associated with using a delegation signature with chainID 0, as this signature may be replayed on a different chain. Display the target contract when users sign a delegation to reduce the risk of phishing attacks. For developers: Ensure to perform permission checks during wallet initialization (for example, verifying the signature address via ecrecover). Follow the namespace formula proposed in ERC-7201 to mitigate storage collisions. Do not assume that tx.origin is always an externally owned account (EOA); using msg.sender == tx.origin as a defense against reentrancy attacks will no longer be effective. Ensure that the target contract delegated by the user has implemented the necessary callback functions to ensure compatibility with mainstream tokens. For centralized exchanges: Track and inspect deposits to reduce the risk of false deposits from smart contracts.
Relevant content

Three major AI giants have collectively called for a slowdown in AI development, but Trump directly rejected the call, stating: "Whoever wins AI will win"

Breaking news from Beating AI Insight: After Dario Amodei, Sam Altman, and Elon Musk successively called for slowing down frontier AI development, Donald Trump has explicitly rejected such appeals. He acknowledged that safety guardrails could be added to AI, but argued that many catastrophic predictions will never come to pass. Trump stated that the U.S. is currently ahead of China in AI and hopes to maintain that lead. "Whoever wins the AI race wins everything," he said. He also criticized that many "negative forces" are hyping things that will never happen.

14 hours ago

Alleged Gen Z trader 0xRay518 has been steadily adding to short positions in PONS and SNDK recently, and trimmed his Bitcoin short position this morning to lock in profits.

According to monitoring by TradingBeats (formerly Hyperinsight), 0xRay518, a prominent post-2000s crypto trader, added short positions in PONS and SNDK over the weekend. As of press time, the address holds $13.46 million worth of 10x SNDK shorts and $3.62 million worth of 3x PONS shorts, making it the second-largest short position holder on Hyperliquid. Separately, 0xRay518 cut his Bitcoin short position by 49.12 BTC this morning, and still holds $81.52 million worth of 20x Bitcoin shorts. Public records show 0xRay518 launched his investment career at 14 in 2020, trading shipping stocks with $3,000 in New Year’s lucky money, peaking at roughly $300,000 in profits before nearly blowing his account due to high leverage. Between 2021 and 2022, he pivoted to NFTs and crypto airdrops, earning his first substantial fortune from the Arbitrum airdrop. In 2025, he abandoned his mid-year high school senior exam halfway, went all-in with $1 million on TRUMP coin on the side, and exited with a 3x to 4x profit.

14 hours ago

Binance will support the USDT contract swap on the Optimism network.

Binance will suspend Optimism network USDT deposits and withdrawals at 02:00 UTC on September 17, 2026, to support the token swap. The swap has a 1:1 ratio: the new token will be named USDT0, while the old token will be renamed OPUSDTE. Spot, margin, futures trading, and Binance Earn services remain unaffected.

14 hours ago

Doubao Mobile Assistant Officially Launches: GUI Operation App Remains, App Can Reject AI Operations

Beating AI News: Doubao Officially Launches Consumer Version of Its Mobile Assistant. It remains an AI assistant software that operates in collaboration with mobile manufacturers at the system level. The first mass-produced device, nubia NaviX Ultra, was previously announced and is set to launch and go on sale on September 16. The "phone operation" feature, which sparked the most controversy earlier, has not been scrapped and remains in Beta form. Doubao also launched the SAEP (Screen Automation Operation Declaration Protocol), allowing third-party apps to set their own rules on whether the AI can perform screen reading, tapping, and operations within their apps; if an app explicitly refuses, Doubao will not proceed with automated operations. In July, LatePost reported that the new generation of Doubao mobile assistant would no longer directly operate super apps like Alibaba and Tencent via GUI. Only when these apps proactively open MCP services can Doubao call their relevant data and functions. MCP refers to interfaces that apps proactively open for Doubao, while SAEP governs the scope of operations developers allow Doubao to perform when interacting with apps via screen reading and simulated taps. Both mechanisms are now in place simultaneously.

14 hours ago

Bonk Guy’s shilling of the Arc Chain Launchpad platform has sparked criticism, with the platform facing accusations of holding rug pull privileges.

Well-known crypto KOL Bonk Guy posted early this morning that he has purchased LONG, the native token of Arc’s main Launchpad, as well as the platform’s top three meme coins, citing short-term trading opportunities on the Arc blockchain. Driven by the news, LONG’s market cap surged 27-fold in a short period. On-chain analytics show that multiple new addresses accumulated LONG at low levels yesterday, and the pump pushed their positions to unrealized gains of hundreds of thousands of US dollars. Additionally, crypto KOL 0xShawn, who previously arbitraged $230,000 by minting BNC4 at off-exchange prices via Four.meme, stated that the long.supply platform holds rug pull privileges and can mint fake USDT at any time. The platform built a cross-chain bridge for Robinhood-chain stock tokens via its own custom cross-chain infrastructure; the stock tokens on the Arc chain are not issued by the official, but by the platform itself. Moreover, the cross-chain bridge’s underlying protocol is not a reliable one like Wormhole or LayerZero (L0). This means: "The project team can shut down the cross-chain bridge at any time and siphon off the locked funds from the Robinhood chain. You are essentially exchanging your real USDT for fake USDT on the Arc chain, similar to the eUSD platform before its launch, which was eventually shut down after an emergency investigation by authorities." BlockBeats reminds users that celebrity shilling may involve conflicts of interest, and users should carefully vet the security of related projects and invest cautiously.

14 hours ago

Long.xyz Founder: This Week to Roll Out Contract and Synthetic Asset Design Updates, Integrating Them with the Platform’s Top Trading Pairs

Long.xyz, a meme coin issuance platform built on Robinhood’s blockchain, founder Nate stated in a post that this week, perpetual contracts and synthetic assets will have great design scope, and they will be integrated with the platform’s top trading pairs. Last week, Long.xyz launched a 1x long position pool supporting tokenized positions of OpenAI and Anthropic, a product that was once widely hyped in the market.

14 hours ago

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano