Lookonchain APP

App Store

Security Alert: MemTensor AI Memory Component Poisoned – Malicious Program Executes Immediately Upon Loading PyPI/npm Packages

50 minutes ago

SlowMist has issued an alert that MemTensor’s AI long-term memory toolchain has suffered a supply chain attack. Affected are MemoryOS, an open-source library for LLMs and agents (PyPI version 2.0.34), and the official plugin memtensor/memos-cloud-openclaw-plugin that connects to the OpenClaw runtime (npm versions 0.1.21, 0.1.23, and 0.1.25). These versions include cross-platform Go binaries that execute when the package is imported or the OpenClaw gateway is launched. Attackers can steal developer credentials including npm/PyPI tokens, GitHub/GitLab credentials, AWS keys, SSH keys, API tokens, and environment variables, then exfiltrate the data; the npm plugin may also leak user prompts. SlowMist recommends users immediately uninstall or roll back to verified safe versions (npm: 0.1.20, PyPI: 2.0.33), terminate related processes, block associated infrastructure, investigate network activity, and rotate all credentials in affected environments.

Relevant content

ONDO Surges in Short-Term Trading, Breaks Through $0.47.

According to HTX market data, ONDO has rallied in the short term, breaking above $0.47, with its 24-hour gain expanding to over 7%. The price movement comes amid news that Ondo has partnered with BlackRock to launch a tokenized "smart portfolio", which allows users to gain exposure to professional investment portfolios through a single on-chain token.

8 minutes ago

Bloom Energy fell more than 5% in pre-market trading, indirectly impacted by Oracle’s notice of force majeure.

According to BIT (bit.com) market data, Bloom Energy is down over 5% in pre-market trading. The news catalyst: Oracle has issued a force majeure notice for its New Mexico data center, seeking to defer related payment obligations if its data center codenamed "Project Jupiter" is shelved and fails to launch as scheduled in 2028. It is reported that Project Jupiter uses Bloom Energy's fuel cells.

8 minutes ago

Oracle invokes the "force majeure" clause to seek liability exemption for its New Mexico data center project.

Bloomberg, citing people familiar with the matter, reported that Oracle is issuing a "force majeure" notice to the developer of its large-scale data center project in New Mexico, a subsidiary of Blue Owl Capital. Oracle is not seeking to exit as the primary tenant; instead, it aims to delay related payment obligations if the data center, codenamed "Project Jupiter," is put on hold and fails to launch as scheduled in 2028, to avoid accumulating ongoing costs. This move adds new uncertainty to the project, which has already faced opposition and regulatory setbacks. According to BIT (bit.com) market data, Oracle (ORCL) saw a pre-market decline of over 5%.

8 minutes ago

RockawayX launches $150 million Catapult Program, positioning yield as the next major on-chain use case.

Digital asset investment firm RockawayX has announced the launch of its Catapult initiative, committing $150 million to tokenize private credit and other income-generating assets, as it positions lending tied to the real economy to become one of the largest markets in crypto. RockawayX said Catapult will provide venture capital, product structuring, liquidity, market making, and distribution services for tokenized credit products. The firm currently operates across multiple crypto investment segments, including an early-stage venture fund, a market-neutral fund that provides liquidity to DeFi protocols, and a treasury business with around $3 billion in deployed capital, and it acquired crypto hedge fund Relayer in August. RockawayX CEO Viktor Fischer stated: “We believe that after trading, yield will be the largest use case on-chain. For this, we need new sources of yield: returns above 12% that are uncorrelated to crypto.” Catapult will focus on areas such as trade and supply chain finance, specialty asset-backed securities, collateralized loan obligations (CLOs), and real estate-related credit. The current size of tokenized real-world assets is approximately $380 billion, with more than half coming from money market funds. RockawayX projects this market will reach $10 trillion to $20 trillion by 2030, a more aggressive forecast than Citigroup’s prediction of $5.5 trillion.

8 minutes ago

ONDO partners with BlackRock to launch a tokenized "smart portfolio" that allows exposure to professional investment portfolios via a single on-chain token.

According to official announcements, Ondo Finance has launched a new on-chain product category: "Ondo Intelligent Portfolios", presented as a single transferable on-chain token that grants non-US qualified investors access to professionally designed portfolio exposure via one single on-chain token. The three portfolio tokens launched today are all built on portfolio strategies custom-developed by BlackRock for Ondo, targeting three core investment needs: - BLKHIon: Ondo High Income Powered by BlackRock (high-yield strategy) - BLKDIGon: Ondo Diversified Growth Powered by BlackRock (diversified growth strategy) - BLKGRWon: Ondo High Growth Powered by BlackRock (high-growth strategy) Ondo Intelligent Portfolios will also unlock a suite of new capabilities, including an automatically executed rebalancing mechanism at the smart contract level, programmatically composable portfolios that integrate with the broader on-chain economy, and the ability to combine multiple asset classes within a single token. Holding these portfolio tokens provides economic exposure to the portfolio’s underlying asset basket. Each portfolio token is issued by Ondo Global Markets and tokenized by Ondo Finance. Investors only need to mint or redeem the single token to hold a basket of weighted tokenized assets, eliminating the need to individually purchase, weight, or rebalance separate positions. Holdings, weights, and every rebalancing event are visible in real time on-chain, and the tokens can be freely transferred peer-to-peer between wallets, trading platforms, and DeFi protocols. Ondo plans to continuously expand this product line going forward, rolling out additional on-chain portfolio products.

8 minutes ago

US initial jobless claims for the week ended September 19 stood at 197,000.

US initial jobless claims for the week ending September 19 came in at 197,000, beating expectations of 201,000, with the prior week’s figure revised from 196,000 to 198,000.

8 minutes ago

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano