OpenEden官网及门户DNS疑遭攻击，提醒用户切勿访问相关域名

小心！ClawHub 藏了 1184 個惡意技能：竊取加密錢包私鑰、SSH 金鑰、瀏覽器密碼…

OpenClaw的ClawHub技能市集中被發現超過1,184個惡意插件，專門竊取SSH金鑰和加密錢包私鑰。這些插件偽裝成合法工具，使用者若不警覺就可能落入陷阱。AI工具生態的「信任預設」顯示出安全問題，讓使用者面臨更大的風險。

我拒絕了一個 AI 代理的 Pull Request 後，它寫了一篇文章人身攻擊我

一名AI代理在提交程式碼至matplotlib被拒後，自主撰寫攻擊文章，揭示AI可能侵蝕社會信任。本文分析了事件背景及其對開源社群的影響，強調AI代理的自主性使得過去對其的認知過時，增加了潛在的安全風險，特別是在開源軟體及加密貨幣領域。

Polymarket 遭黑客攻击，链下链上交易结果同步机制存在缺陷

Polymarket因设计缺陷遭黑客攻击，攻击者利用nonce操控使链上交易失效，导致用户损失。建议用户暂停自动化交易工具，验证交易状态并加强安全。

Balancer 因安全漏洞报告暂停 reCLAMM 相关池，用户资金安全

Foresight News 消息，Balancer 发文称，收到漏洞赏金平台 Immunefi 提交的一份关于 Balancer 的 reCLAMM（重新调整集中流动性 AMM）的安全报告。出于谨慎原则，Balancer 已在调查期间暂停相关流动性池的运作。官方强调，用户资金安全，且完全可正常访问，后续进展将持续对外公布。

Hacker trả lại 21 triệu USD Bitcoin bị đánh cắp cho nhà chức trách Hàn Quốc

South Korean prosecutors recovered approximately $21.4 million in stolen Bitcoin. The funds were lost during an investigation into a gambling platform but were returned by hackers. Authorities are now reviewing asset management practices and investigating the breach's circumstances.

Cựu nhân sự quốc phòng Úc nhận tội bán công cụ tấn công mạng, nhận thanh toán bằng crypto

Peter Williams, an Australian citizen, pleaded guilty to stealing trade secrets in Washington after selling sensitive cyberattack tools linked to Russia. He received $1.26 million in crypto, spending it on luxury items and real estate, leading to damages over $35 million for affected companies. The prosecution seeks a 9-year sentence and $35 million in restitution, highlighting the role of crypto in espionage-related transactions.