Author: 行政

BTCPay Server, software for accepting Bitcoin payments, merged a fix on Oct. 19 for a gap that could let API keys with broad permissions for one store reach server-wide or account-wide functions. For merchants sharing such credentials with an integration, the risk is delegating more authority than intended.Nicolas Dorier merged PR #7684 into the project’s master development branch. As of Oct. 26, BTCPay’s release list still identifies version 2.4.5, dated Oct. 6, as its latest release.How the permission boundary changesBTCPay’s authentication documentation describes API keys as integration credentials restricted by permission and store. Those are separate limits: what an application…

A hacker breached a public PHP server to win a Bitcoin bounty after the challenge sparked doubts about critical software vulnerabilities.The researcher, identified online as Killa, successfully executed code on the Steal My Bitcoin challenge server on October 25, extracting a hidden wallet credential in an experiment that drew attention to claims that artificial intelligence was making serious security flaws easier to exploit.Challenge operator James Pavur confirmed the successful attack, saying server logs supported the researcher’s findings.However, the result came after problems with the challenge’s initial configuration led security experts to question whether it meaningfully tested the underlying vulnerability.The competition…

Cardano developers have merged key Leios code as the network pursues a planned 15-fold increase in transaction capacity.The blockchain’s consensus team integrated Praos2, which combines Cardano’s existing consensus protocol with the Leios scaling system, into its main development branch, according to a development report.The team also merged LeiosNotify and LeiosFetch components, which help network nodes exchange information needed to process additional transaction batches. Work on selecting and retrieving those batches, known as endorser blocks, remains outstanding.The progress comes as developer Input Output (IOG) prepares to introduce Leios through Cardano’s forthcoming Dijkstra hard fork, targeting an initial three-to-fivefold increase in processing capacity.Under…

Prime Minister Benjamin Netanyahu said on Friday he had asked for a plan to use blockchain if Israel faces banking sanctions. The Bank of Israel rejected the idea on Saturday, and Netanyahu replied that he does what he thinks is right. A letter signed by 109 economists and former officials, including two Nobel laureates, called the proposal useless ahead of Tuesday’s election. Israeli Prime Minister Benjamin Netanyahu drew rebukes from the Bank of Israel and more than 100 economists over the weekend after suggesting cryptocurrency could help Israel get around international sanctions. Netanyahu raised the idea in an interview with…

Bitcoin wallet Electrum has patched a security flaw that allowed hackers to redirect payments when users tried to increase transaction fees.The developers disclosed the vulnerability on Oct. 24, confirming that malicious servers had exploited the weakness and that at least one user lost Bitcoin after unknowingly approving a fraudulent transaction.The high-severity vulnerability affects Electrum versions earlier than 4.8.3. It exploits the wallet’s reliance on external servers to track unconfirmed transactions, allowing attackers to manipulate the payment information users see before they authorize additional fees.The disclosure followed two complaints received on Oct. 11 and Oct. 18. The first user noticed an…

Key takeaways Cardano trades near $0.201 on Monday, extending its decline after three consecutive losing weeks. Funding has turned negative at -0.0032%, reinforcing the bearish derivatives picture. ADA faces initial resistance at $0.213, while weak momentum leaves recovery attempts vulnerable. Cardano fell below $0.202 on Monday as pressure persisted across its derivatives, spot, and technical indicators. ADA traded around $0.201 following three consecutive weeks of losses, with its decline exceeding 20% since early October. The token remains beneath several major moving averages, suggesting buyers have yet to establish a sustained recovery. Although momentum is approaching oversold territory, the broader setup…

A federal judge dismissed the criminal case against Milei, his sister Karina and nine others, ruling that posting about LIBRA did not itself constitute fraud. The decision contrasts with a parliamentary investigation that found Milei played an essential role in promoting the token and attracting investors. LIBRA collapsed more than 90% after reaching a US$4 billion valuation, with estimated realised trading losses of US$251 million. Five investors are challenging their exclusion from the case and could appeal the dismissal if reinstated, while opposition lawmakers have criticised the ruling. A court in Argentina dropped the criminal case against President Javier Milei…

Britain’s Financial Conduct Authority has proposed treating enhanced checks on crypto transfers involving personal, or unhosted, wallets as good practice in nonbinding guidance. It also criticizes firms that cannot explain the risk scores they use.The regulator opened consultation CP26/38 on Oct. 23, seeking feedback on changes to its Financial Crime Guide until Dec. 24, 2026. The proposals address how firms assess transfers and operate their financial-crime controls. Related ReadingUK’s FCA says crypto apps may need licenses when algorithms choose trade routes Draft section FCG 3.2.8 lists applying enhanced due diligence, meaning more intensive checks, to transactions involving unhosted wallets as…

OKXICE’s notice dated 23 October lists 22 companies that have objected, up from 16 in its 19 October notice. Under the SEC’s Innovation Exemption, a venue cannot trade a third-party tokenised stock if the issuer objects within 30 days. Nasdaq has told issuers to be cautious and plans to opt its own shares out of these venues. Wells Fargo, Cisco, Moderna and Intuit have refused to let their shares trade in tokenised form on OKXICE, the planned venue owned by OKX and NYSE parent Intercontinental Exchange. The venue’s latest public notice, dated Friday 23 October, lists 22 issuers that have…

Bitcoin fell to US$79,624, down 3.4% for the week, while Ethereum, XRP, Solana and Hyperliquid also recorded weekly losses. Crypto liquidations reached roughly US$815 million over 24 hours, including more than US$400 million in long positions closed within four hours. US spot Bitcoin ETFs recorded US$301.2 million in weekly net inflows despite US$773.5 million in withdrawals over Thursday and Friday. Analyst Michaël van de Poppe warned Bitcoin could briefly fall below US$75K, while holding US$80K and forming a higher low could signal a recovery. Bitcoin (BTC) has dropped below the US$80K (AU$113.8K) mark for the second time in as many…