Ledger攻击蔓延至欧盟，AI发现“18万亿XRP”漏洞：Hodler’s Digest

据报道，在亚洲经销商处造成9340万美元损失后，针对Ledger的植入物攻击已蔓延至欧洲

一起涉及篡改过的Ledger设备的攻击事件已在亚洲硬件钱包用户中造成估计高达9340万美元的损失，据报该攻击现已蔓延至欧洲。

X平台用户Johannes展示了他两周前从欧洲消费电子连锁店MediaMarkt购买的一台被篡改过的Ledger的照片。设备内部的植入物似乎是此前在亚洲与CryptoBilis发货设备相关联的版本的一个早期版本，且目前尚未有资金被盗取。“要么设备无法工作，要么他们在等待更多受损设备被广泛使用，”他说。

前Mt Gox首席执行官Mark Karpeles对此进行了调查，正是他的调查使这一问题浮出水面。他指出，设备上的天线标注其为“欧亚版本”，这表明针对不同移动频率地区发送了不同版本的植入物。截至发稿，Ledger尚未确认这台欧洲设备属于同一攻击事件的一部分。

欧洲X用户Johannes写道：“警告：Ledger事件不仅限于亚洲。”

Late last week, the complex attack affected Ledger equipment in Asia. Devices sold by official distributor CryptoBilis (which recently changed ownership) were found to have been modified that apparently allowed attackers to read mnemonics and steal funds while passing authenticity checks. As a precautionary measure, Ledger has asked CryptoBilis to suspend sales and shipments of its equipment and advised customers who have purchased equipment from the dealer in the past 90 days to consider transferring assets to new Ledger equipment. "The number of affected devices is limited," it said in its latest statement today.

CryptoBilis is listed as an authorized Ledger dealer in Indonesia, Malaysia and the Philippines. Cyber security agency Yfarmx estimated the total damage involving 471 addresses at $93.4 million, but the figure has not yet been confirmed by Ledger.

Security company discovers XRP casting vulnerability

Security company Veria Labs has received a $250,000 vulnerability reward for discovering an overflow hidden in XRP code since 2015. The company claims that a single transaction could theoretically print trillions of dollars in XRP out of thin air. The vulnerability has been fixed and there is no evidence that it was ever exploited.

Veria Labs co-founder Cayden Liao wrote on the X platform that its AI agent conducted a comprehensive scan of software rippled running XRP Ledger and found two low-severity vulnerabilities. By combining these two vulnerabilities, they built a larger exploit. Liao said that more than 18 trillion XRPs could be created with just one transaction, which is 184 times more than the total supply of XRPs.

He wrote: "This puts the entire US$94 billion market value at risk, more than 60 times the amount of the largest crypto hack attack in history." He added,"The reason we suspect no one discovered this vulnerability is because it connects two vulnerabilities that are individually less severe."

The vulnerabilities were reported on September 22 and RippleX patched them three days later.

Vitalik Buterin supports entering cryptographic "bunker mode" in the context of accelerating AI mathematical progress

Ethereum co-founder Vitalik Buterin supports researcher Justin Drake's warning that the development of artificial intelligence may undermine the cryptographic technology used in today's blockchains before the arrival of quantum computers.

Buterin wrote: "I wouldn't recommend anyone rushing to transfer funds into a new wallet today. However, we should take seriously the risks to cryptography that AI accelerates mathematical development."

鉴于OpenAI发布了数百项人类无法解决的数学新发现，Drake敦促行业为“地堡模式”做好准备。虽然这些发现均不涉及密码学，但AI代理有可能揭示椭圆曲线密码学或基于格的密码学背后数学结构的新见解，这让以太坊核心团队感到担忧。

其他项目和分析师批评这些担忧是在制造恐慌，批评者认为没有证据表明AI代理接近破解密码学。但另一方面，也没有太多证据表明一个新的AI模型即将一次性解决数百个其他未解难题。

来源：由Google AI生成

三星钱包将于10月为美国Galaxy用户添加USDC转账功能

三星计划于10月最后一周向8200万符合条件的美国Galaxy用户推出三星钱包支付应用中的USDC转账功能。

该功能将允许用户向国际兼容的加密货币钱包发送USDC，并将资金转移到60多个国家的符合条件银行账户中，收款人可以以当地货币接收资金。用户必须完成身份验证才能使用该服务。

Bastion将提供稳定币账户和支付基础设施，Coinbase将通过Coinbase Prime Vault担任子托管人。Solana和Sui被指定为技术合作伙伴。

加密货币行业大力支持共和党人疏远了民主党人：库默

Former New York Gov. Andrew Cuomo said the cryptocurrency industry's heavy support for the U.S. Republican Party has alienated Democrats, whose support is crucial to passing federal cryptocurrency legislation.

Kalshi predicts that the market will set the probability of Democrats winning both houses of Congress at about 61%. Cuomo said the Democrat-controlled Congress will either try to reverse the SEC and CFTC's cryptocurrency initiatives, or may work with the Trump administration to pass the full CLARITY Act.

"You need Democrats to pass the bill, and you need Republicans. You have to be more balanced,"he said.

While he acknowledged the existence of a Democratic "anti-cryptocurrency" view, he said the technology is very consistent with the party's goals and beliefs. "It empowers people who otherwise wouldn't have access to financial products, and Democrats have been working on it all the time," he said.

Source: Generated by Google AI

Winners and Losers of the Week

During the weekend, Bitcoin (BTC) fell 2.8% to trade at $83,435; Ethereum (ETH) fell 6.5% to trade at $2,562; and XRP (XRP) fell 7% to trade at $1.40. According to CoinMarketCap, the total market value is US$2.82 trillion.

Among the top 100 cryptocurrencies, the top three altcoins that have gained this week are StarkNet (STRK), which rose 91%(after announcing that it will become a post-Quantum L1), Binance Life (Binance Life) rose 25.4%, and Celestia (TIA) rose 20.8%.

The top three altcoins that fell this week were Venice Token (VVV), down 18.5%;Sky (SKY) fell 16.2%; and Uniswap (UNI) fell 15.4%.

Forecast this week

Bitmine Chairman Tom Lee said Ethereum will reach US$25,000 to US$50,000 this cycle

Bitmine Chairman Tom Lee said at the Token2049 conference on Friday that ETH will exceed US$5000 before the end of the year, and at the end of the cycle, Ethereum "may easily reach US$25,000 or US$50,000 per token price."

Lee also revealed that Bitmine is close to its 5% target after accumulating approximately 6 million Ethers. The company only needs to purchase about 100,000 more ETH units to achieve this ratio.

"This is a hard upper limit. We're not going to continue accumulating after reaching 5%,"Lee said. "We will not hold more than 5% of Ethereum."

This week's major FUD (fear, uncertainty and suspicion)

Coldcard said it was investigating why phishing links appeared on its X account.

Coldcard, a bitcoin-only hardware wallet, said that although the company uses offline two-factor authentication, an unauthorized phishing link appeared on its official X account on Sunday.

The post was later deleted and the company stated that the only official website was https://coldcard.com.

DefiLlama's hacker tracker estimated losses related to the July Coldcard vulnerability at $115 million.

THORChain developers accuse Tether of temporarily freezing USDT vault

THORChain技术联合创始人Chad Barraford指控稳定币发行商Tether无理由对该网络的USDt (USDT) 金库进行黑名单处理，随后在几小时后解冻。

Barraford在周五的X帖子中表示，Tether已将THORChain金库地址列入黑名单，冻结了该网络四个钱包中合计约145万枚USDT的资金。他报告称，大约两小时后，在Tether解冻所有地址后，交易恢复。

纽约永久禁止Celsius创始人Mashinsky参与，和解金额为3500万美元

前Celsius首席执行官Alex Mashinsky在与纽约州总检察长Letitia James达成的和解协议下，被永久禁止从事加密货币、证券和商品行业，该协议包括高达3500万美元的条件性付款。

周五宣布的纽约和解协议解决了2023年的一场民事诉讼，起诉Mashinsky在2022年Celsius崩溃前误导数十万投资者关于其安全性的问题。

Mashinsky因欺诈罪正在服刑12年，并被另行命令没收超过4800万美元。

本周杂志精选专题

法国成为比特币持有者最危险的地方：7个月内发生90起袭击

法国当局记录了7个月内发生的90起涉及绑架、勒索、威胁和暴力盗窃的加密相关案件。是什么让法国成为这样一个热点？

加密借贷再次上升……但他们解决了风险吗？

Crypto-lending has increased by 55% since July, but now must deal with the danger of AI-assisted hacking attacks and the risk of risk spreading through interconnection protocols. Here are ways to stay safe.

Raoul Pal says capital is flowing back from AI to cryptocurrencies

Real Vision founder Raoul Pal said that a pause in AI stock gains could help cryptocurrencies attract capital, while AI proxies could drive the adoption of Ethereum and Solana.