闪电网络 · 1068

NoOnes announced its closure: it will gradually cease operations due to sanctions

Comparing news, the peer-to-peer cryptocurrency trading platform NoOnes published an article yesterday announcing that it will gradually shut down its business after more than three years of operation. Officials said they had previously continued to seek a resolution and lift the sanctions against NoOnes, but in the end they were unsuccessful. NoOnes said the relevant sanctions caused it to lose a key partner, while blockchain monitoring agencies marked NoOnes-related transactions as high risk, making it increasingly difficult for the platform to continue operating normally. According to official arrangements, the business contraction began on August 17, and the P2P market will close at 23:59 UTC on August 21. Services such as Swap, NoOnES Visa, fiat withdrawals, gift card stores, and the Bitcoin Lightning Network will also be discontinued one after another. After that, the platform will only support withdrawals, and users will still be able to log in, check their balance, and withdraw remaining assets. Officially, users are advised to complete asset withdrawals as soon as possible, no later than August 23. On January 26, 2025, the peer-to-peer cryptocurrency trading platform NoOnes revealed that earlier this month, the platform experienced a major security breach that resulted in the loss of around $8 million in crypto assets. CEO Ray Youssef confirmed the news after on-chain detective ZachXBT revealed the hack on his Telegram channel.

4d ago

Kimi K3 Coin Circle Diagnosis: Scanned 501 Projects and 1,280 High-Risk Hazards in Two Weeks

Author: Claude, Deep Wave TechFlow Original title: Kimi K3 Coin Circle Diagnosis: Sweeping 501 Bitcoin Projects and 1280 High-Risk Hidden Hazards Deep Wave Guide: A volunteer “Bitcoin Red Team” used Kimi K3 from the dark side of the Moon to sweep 501 Bitcoin open source projects in two weeks, recording 7958 discoveries, of which 1,280 were rated as high-risk or serious. The Chinese model did this because OpenAI and Anthropic rejected these defenders on security grounds. If your coins are in a wallet or node software that hasn't been updated in years, this is worth reading. On August 13, Calle, a member of Bitcoin Red Team and founder of the Cashu Protocol, summed up the phased conclusions of this operation on X, and the tweet received nearly 260,000 views. His original statement was straightforward: “Decades of open source code collided with two weeks of Kimi K3, and the result was that everything was broken and Bitcoin was burning.” It all started with a $100 million wallet bug on July 30. The hardware wallet Coldcard was revealed to have a firmware flaw: the device fell back to a predictable software process when generating mnemonics. The security chip only provided 32 bits of entropy, and there were only about 4.3 billion possibilities left in the effective key space. The attackers followed the map and emptied users' wallets in multiple waves, confirming losses of more than $100 million, and the total loss is suspected to be close to $130 million. Bitcoin Magazine issued a rare “Immediate Transfer of Funds” emergency notice. This disaster directly spawned the Bitcoin Red Team. Calle and Rob Hamilton, CEO of escrow insurance company AnchorWatch, led by dozens of contributors. The non-profit organization OpenSats reimbursed most of its computing power expenses and conducted an AI audit of almost the entire Bitcoin open source ecosystem. After cleaning 501 projects in two weeks, the discovery was not equal to a bug. By August 8, the team spent hundreds of hours cleaning 501 projects, recorded 7,958 discoveries, and 1,280 were rated as high-risk or serious. These numbers need to be broken down: on the 108th hour node, only 24.7% of findings were dynamically reproduced, 29.4% were reported to the project party, AI audits would be misreported and repeated, and manual verification was still ongoing. However, the “moisture theory” cannot stop the toughest case. According to the official release records of the payment software BTCPay Server, a serious vulnerability (two-factor authentication bypass) reported by Red Team members Bruno Garcia and Ben Carman was actually exploited before it was fixed. The attackers used this to obtain the node's management credentials, thereby controlling the associated Lightning Network wallet. BTCPay released two secure versions in a row. The community set up recovery rewards for victims, and the foundation allocated another 0.21 bitcoins to the Red Team Fund. The maintainers used their actions to vote of confidence in this group of findings. The American model is apologizing, and the Chinese model is looking for loopholes. Why is the main force Kimi K3 and not GPT or Claude? Because American models don't take on this job. Rob Hamilton stated that after completing all authentication, he used OpenAI's model to analyze a publicly disclosed codebase and was rejected in less than 20 minutes. The comparison between Bitcoin's core contributor PortlandHodl went viral in the community: in the same code, America's leading model's answer was “You're right!” China's open source model directly identified 78 serious vulnerabilities. Hamilton's comment is even more serious: “I'm basically asking Xi not to let my software be hacked right now.” On August 10, more than 70 custodians, exchanges, mining companies, and development organizations jointly signed an open letter from the Bitcoin Policy Institute requesting that cutting-edge AI labs open access to credible defenders. Alex Thorn, head of research at Galaxy, wrote in a joint message: “Americans should not be forced to rely on Chinese AI to protect themselves. The red team needed these models.” However, we also need to pour cold water on the carnival: a joint evaluation by the British AI Security Research Institute and CAISI in the US showed that Kimi K3 was better than GLM-5.2 in vulnerability development tests, but it still lags behind the strongest closed source model in the US. The defense didn't choose the strongest one,...

8d agoburnking#AI #Anthropic #OpenAI #Bitcoin #wallets

Bitcoin payment processor BTCPay Server confirmed a critical vulnerability and caused the theft of funds, and urged LND users to upgrade immediately

Comparing news, BTCPay Server issued an emergency security notice stating that all versions prior to 2.4.2 (including 2.4.2 candidate versions) had a critical vulnerability, and it has been confirmed that the vulnerability was actually exploited by attackers and that user funds were stolen. The vulnerability could allow an unauthenticated, remote attacker to obtain LND (Lightning Network Implementation) .macaroon credential files, thereby controlling LND nodes and transferring funds. Officials have confirmed that the vulnerability was actually exploited and caused user funds to be stolen, and users using LND are urged to immediately upgrade to BTCPay Server 2.4.2 and LND 0.21.1. The BTCPay Server on-chain wallet itself has not been affected, and the government has yet to disclose the exact amount stolen. According to public information, BTCPay Server is a free, open source, and self-hosted Bitcoin payment processor focused on providing no-fee, no-intermediaries Bitcoin payment solutions for autonomous individuals and businesses. The protocol's core contributors have estimated that there may be hundreds of thousands of BTCPay Server instances running around the world. Its main GitHub repository has been downloaded over 1 million times.

13d ago#On-chain dynamics

BTCPay restricts remote access to Lightning Network after attackers stole funds

According to Cointelegraph, according to Cointelegraph, the BTCPay server has temporarily restricted public remote connections to Lightning Network nodes running Lightning Network Daemon (LND) software. Previously, attackers used a serious vulnerability to obtain credentials and transfer funds. BTCPay said this restriction prevents external wallets such as Zeus from connecting through the BTCPay server domain name. BTCPay said Lightning payments can continue and plans to restore remote access options when deemed safe.

13d ago

Boltz accelerates the indefinite suspension of Bitcoin exchange services due to AI-assisted attacks

According to Twitter, the unmanaged Bitcoin exchange service Boltz has suspended the Bitcoin exchange service indefinitely, and stated that the relevant service will be suspended until further notice, and it is not possible to provide a recovery time for the time being. Boltz allows users to transfer Bitcoin between the Lightning Network and the Bitcoin base layer without the company hosting users' funds in the process. Boltz said its infrastructure has experienced a continuous increase in automated, AI-assisted detection over the past few months, and has handled multiple exploits. The company says every incident has been brought under control, but the attackers are iterating faster than their team is able to find and fix the vulnerability. Boltz revealed that the pace of attacks has accelerated over the past few days, and after reviewing the results of recent security scans, the company believes it cannot responsibly re-enable the exchange service. Its API can still be used to process collaborative refunds, unilateral refunds can still operate because they don't rely on Boltz infrastructure, and customer support remains available.

18d ago

Boltzhq suspends exchange services indefinitely due to AI-assisted attacks

Comparatively, Boltzhq has suspended its exchange service indefinitely after reporting an increase in AI-assisted attacks and multiple controlled exploits. Due to its non-custodial design, user funds have never been at risk, but wallets that rely on Boltz for Lightning Network exchanges, including AquabitCoin and BULLBITCOIN, experienced service disruptions during the deployment of alternative infrastructure.

19d ago

GPUS and Quantum Solutions sell crypto assets to build AI computing power, and Vida Global connects to Lightning Network to pay

Comparative news, according to BBX data, yesterday listed companies around the world revealed the latest real announcements on crypto asset position adjustment and business payment applications. The core developments are as follows: Hyperscale Data monetizes 100 BTC to build an AI data center: US stock listed company Hyperscale Data, Inc. (NYSE American: $ GPUS) announced the sale of 100 bitcoins to fund the construction of its AI data center in Michigan. The company's CEO William Horne said the move was a “conversion of one balance sheet asset to another,” and clearly clarified that the company's underlying beliefs about Bitcoin have not changed. Quantum Solutions sells 1,000 ETH to inject into AIDC business: Japanese listed company Quantum Solutions announced that its consolidated subsidiary GPT Pals Studio Limited (GPT) sold 1,000 ETH for $1.9 million (approximately 311 million yen). All proceeds from the sale will be invested in the expansion of artificial intelligence infrastructure (AIDC) and data center businesses. Vida Global is insensitive to Bitcoin payroll through the Lightning Network: Vida Global (NYSE American: $ VIDA), a company listed on the US board of the New York Stock Exchange, announced the adoption of Voltage Credit to pay its global team members in Bitcoin through the Lightning Network. The mechanism uses revolving credit lines to instantly issue bitcoins and repay the balance in US dollars at the end of each month, like processing standard vendor invoices, so that the company completed the establishment of a cryptographic remuneration settlement channel without directly holding a Bitcoin wallet or reflecting crypto assets on the balance sheet.

22d ago

Lightning Network Developer Lightning Labs Launches L402 Bitcoin Proxy Payment Website

Comparatively, according to The Defiant, Lightning Labs, the company behind Lightning's web development tools, launched an exclusive website for the L402 protocol on Wednesday, positioning the agreement as a channel for AI agents to pay with Bitcoin. The company said that with L402, agents can make payments in Bitcoin and complete identity verification natively without accounts, intermediaries, or human participation, and describes L402 as a machine-to-machine commerce protocol on Lightning. According to its disclosure, what was added this time was a website rather than the agreement itself. L402 is the Lightning HTTP 402 protocol, which previously existed in the Lightning Labs technology stack, and its standard implementation, Aperture, is currently used by the unmanaged exchange service Lightning Loop. The mechanism reuses the HTTP 402 status code. When the client requests a restricted interface, the server returns 402 and a verification header containing tokens and Lightning invoices. After payment, the client accesses the interface with the token and payment images, and the server can complete the verification without querying the payment database.

23d ago

Lightning Labs launches Wavelength to provide easy Bitcoin models for developers and AI agents

Comparatively, according to Bitcoin Magazine, Lightning Labs has released an alpha version of Wavelength. The toolkit provides developers and AI agents with self-managed Bitcoin payment capabilities through a simple unmanaged API without running nodes, managing channels, or obtaining liquidity. Wavelength supports on-chain Bitcoin, Lightning Network payments, and Ark-like settlement layers. Each off-chain payment uses standard BOLT 11 invoices and is interoperable with existing Lightning networks. AI agents can call APIs through the Model Context Protocol (MCP), hold balances, and pay for services such as API calls in minimal units. Wavelength has launched Signet and testnet, and mainnet access is invitation-based. Bitcoin is initially supported, and the stablecoin support plan is implemented through Taproot Assets.

30d ago

Polymarket launched the Bitcoin Lightning Network for instant recharge and access to the Spark protocol

Comparing news, the prediction market platform Polymarket announced that it supports instant, self-hosted deposits through the Bitcoin Lightning Network, and the underlying layer is supported by the Spark protocol. Compared to the previous on-chain recharge method, which required 3 to 6 block confirmation and took about 10 to 60 minutes, the new solution can achieve payment in seconds and reduce deposit thresholds and transaction costs. According to reports, Spark can complete checks such as double flower risk, handling fees, and replace-by-fee (RBF) during transaction broadcasts to achieve zero confirmation of accounts. At the same time, it also supports on-chain, Lightning Network, and stablecoin payment channels without the need for the platform to operate Lightning Network nodes on its own. Polymarket said the move will further improve the efficiency of Bitcoin users' use of funds and enhance competitiveness with competitor Kalshi.

45d ago