Lookonchain APP

App Store

Ledger CTO: Large-Scale Supply Chain Attack Underway, Entire JavaScript Ecosystem at Risk

8 hours ago

September 9th. Charles Guillemet, Ledger's Chief Technology Officer, wrote that "A large-scale supply chain attack is currently in progress: the NPM account of a well-known developer has been compromised. The affected package has been downloaded more than 1 billion times, which means the entire JavaScript ecosystem may be at risk. The malicious code operates by silently modifying cryptocurrency addresses in the background to steal funds. If you use a hardware wallet, please carefully verify each signature transaction, and you will be safe. If you do not use a hardware wallet, please refrain from making any on-chain transactions for the time being. It is currently unclear whether the attacker has already stolen the software wallet's mnemonic phrase. For more details, refer to the [report](https://jdstaerk.substack.com/p/we-just-found-malicious-code-in-the). If you are using Ledger or another hardware wallet that supports clear signatures, you will not be affected. My previous tweets were a reminder: Users who do not use hardware wallets that support clear signatures are at risk. Please make sure to carefully review each transaction before signing."
Relevant content

「Gold Token」 Market Cap Surpasses $2.72 Billion, with 24-hour Trading Volume Exceeding $280 Million

September 9th. Based on market data, along with the recent upward surge in the price of gold. Coupled with the weakening of the US dollar and the heightened safe-haven sentiment ahead of the interest rate meeting, the market capitalization of "Gold Tokens" has exceeded $27.2 billion, showing a 1.7% increase in the past 24 hours. In specific terms: The 24-hour trading volume of PAXG is reported to be $1.2 billion, with a total market capitalization of $10.5 billion; The 24-hour trading volume of XAUT is reported to be $1.4 billion, with a total market capitalization of $13 billion. PAX Gold (PAXG) is a gold-backed digital currency issued by Paxos, and XAUT (Tether Gold) is a gold-backed digital currency issued by Tether. Each token of PAXG and XAUT is pegged to 1 ounce of gold.

7 minutes ago

A newly created address withdrew 50,000 AAVE from Kraken, worth $15.07 million.

September 9th. Based on the monitoring of OnchainLens, a new address withdrew 50,000 AAVE from Kraken, with a value of $15.07 million, and also 15 ETH, with a value of $64,670. Address: 0x7D94077f58593F8b97c5cAB56c8924E13b49946E.

7 minutes ago

Stablecoin Issuance Layer OneStable Launched, Jointly Introduced by Enso, LayerZero, Stargate, and Others

On September 9th, EnsoBuild, LayerZero, StargateFinance, and Reservoir jointly launched the world's first stablecoin issuance layer named OneStable. It was officially launched on September 8th. The goal is to offer a new solution to the stablecoin market, enhance liquidity efficiency, and facilitate the further development of the stablecoin economy.

7 minutes ago

OKX Wallet: Not Affected by Third-Party Component Security Issues, App, Plugin, and Web Versions Are All Safe to Use

September 9th: In light of the "NPM Supply Chain Attack" incident, OKX Wallet stated that OKX always places great emphasis on system security and strictly manages the risk of using third-party components throughout the product development and deployment processes. After internal investigations and evaluations, OKX's Android and iOS native framework-based APP does not have any relevant security risks; OKX's plugins, Web applications, and mobile DApp browsers did not use the affected versions of third-party components. All platform services are operating normally, and users can continue to use them with confidence. It is reported that the attacker, through a phishing email (disguised as npmjs support), stole developer qix's NPM account credentials. Then, malicious code was injected into 18 popular JavaScript packages released by qix (including chalk, debug-js, etc., with a weekly download volume of over 2 billion times). This attack is considered the largest-scale supply chain attack in

7 minutes ago

Analysis: Ethereum ETF Inflows Do Not Equate to Spot Market Buying Pressure, Traditional Fund Preferences Overlay Futures Portfolio Strategy

September 9th. On-chain data analyst Murphy published an article to analyze whether "ETF Net Inflows Equal Genuine Buying Pressure." Since the launch of BTC and ETH spot ETFs, the inflow and outflow of their funds have become one of the most closely watched indicators in the market. Generally speaking, inflows are regarded as a signal of continuous accumulation by institutional investors. Whether the net inflow of ETFs can directly represent genuine buying demand is different in the case of BTC and ETH, the two mainstream assets. Analyzing the changes in CME open interest and ETF holdings of BTC, it is obvious that the price increase of BTC (the black line rising) is highly correlated with the net inflow of ETFs (the red line trending up). In contrast, the magnitude of the change in CME futures open interest (the yellow bars) is much smaller than that of ETFs. This indicates that the primary way for traditional funds to allocate to BTC is to directly buy spot ETFs to obtain investment

7 minutes ago

Token prices in the AI sector saw a general increase, with WLD and KAITO leading the gains.

On September 9th, according to HTX market information, the tokens in the AI sector witnessed a general rise. They include: WLD is currently trading at $1.82, with a 24-hour increase of 47.8%; KAITO is currently trading at $1.37, having a 24-hour increase of 34.74%; IO is currently trading at $0.606, showing a 24-hour increase of 13.5%; SAHARA is currently trading at $0.1, with a 24-hour increase of 13.2%; SHELL is currently trading at $0.1367, having a 24-hour increase of 12.4%; VIRTUAL is currently trading at $1.29, with a 24-hour increase of 9.42%.

7 minutes ago