Lookonchain APP

App Store

Fresh security vulnerabilities uncovered in ZCode following its open-sourcing: the project's default encryption key can be calculated using the username and path.

1 hours ago

Beating AI Express (Dongcha) – After ZCode was open-sourced, developers discovered a security vulnerability in its code. ZCode encrypts user login credentials for local storage, but by default, its decryption key can be directly calculated using the operating system, username, and user directory—information typically easy to access. Once attackers obtain ZCode’s stored credential files, they can regenerate the key via the open-source code without needing to crack the encryption algorithm. ZCode’s official documentation states these login credentials are “encrypted per device and cannot be decrypted after switching devices.” However, the open-source code’s default scheme does not use device IDs or hardware information, creating a mismatch between the official claim and the actual code. Notably, this is not a vulnerability enabling remote credential theft; attackers must first gain access to local credential files. If users set their own ZCODE_CREDENTIAL_SECRET, the default key scheme will not apply. In case of file leakage, login sessions for ZCode, Z.ai, or BigModel may be restored, potentially leading to account impersonation or Coding Plan quota misuse, though this will not result in computer hacking.

Relevant content

NEAR: Milestone conditions have been met, and eligible users can redeem NEAR rewards.

NEAR Protocol tweeted that the volume-weighted average price (VWAP) of NEAR has remained at $3.33 for three consecutive days, and the relevant NEAR rewards have been redeemed and distributed—users can log in to their accounts to check details. According to official rules, the team’s first batch of non-transferable milestone tokens totals 333,333 units, with the snapshot trigger condition being that the Total Value Locked (TVL) of Confidential Intents reaches $70 million. Milestone tokens can only be converted into tradable NEAR after NEAR’s three-day VWAP hits or exceeds $3.33. Eligible users are required to maintain a privacy balance of over $100 on near.com and complete at least one privacy swap.

9 minutes ago

Lending protocol Venus Protocol will cease supporting opBNB, Optimism, and Unichain.

Lending protocol Venus Protocol announced in a Twitter post that it will cease support for three blockchains—opBNB, Optimism, and Unichain—on October 23, and advised users with active positions on these chains to close their positions and withdraw funds before the deadline.

9 minutes ago

X-Agent Releases New Whitepaper: Enabling AI to Evolve from "Content Generation" to "Execution and Transactions"

AI Agent onchain operating system X-Agent has released its latest whitepaper, which details its product architecture, MCP ecosystem, business model, and use cases for the $XAGT token. The whitepaper notes that the next phase of the AI industry goes beyond generating text, images, or code—it will enable Agents to understand user intent, call tools, execute tasks, and complete transactions. Centered on the philosophy of "Speak to Build, Share to Connect," X-Agent allows users to create AI Agents with context, memory, skills, API, and wallet connectivity capabilities via natural language, no coding required. In terms of business model, X-Agent aims to integrate the full lifecycle of Agent creation, MCP capability integration, distribution, payment, and monetization. Developers can package APIs, data, and professional services as MCP capabilities, earning revenue through pay-per-use, subscriptions, or transaction commissions. The $XAGT token is planned for use in computing fees for secure runtime environments, LLM and API calls, Agent transaction settlements, MCP service payments, premium Agent template purchases, and developer deployments. Future use cases will expand to service staking, multi-Agent settlements, and ecosystem governance. According to the project team, X-Agent currently boasts over 1 million registered users, has completed more than 1.1 million autonomous tasks, and consumed over 84 billion LLM tokens. Going forward, the project will advance initiatives including Super-Agent, enterprise sandboxes, decentralized Agent Stores, and multi-Agent collaboration systems. Through this whitepaper, X-Agent aims to further clarify its long-term vision: enabling anyone to create Agents via language, and empowering Agents with the ability to execute, distribute, pay, and achieve continuous commercialization.

9 minutes ago

Kimi K3 has officially launched on AWS, with Reuters previously revealing that the two parties were in talks over a revenue split of up to 30%.

Beating AI Insight News Brief: Amazon Web Services (AWS) has officially integrated Kimi K3 into Amazon Bedrock, enabling enterprises to call the model directly via AWS on a per-token basis. AWS has listed Moonshot AI as the direct model provider for Kimi K3. Reuters previously reported that Moonshot AI was in talks with AWS, Microsoft Azure, and Google Cloud over revenue sharing for Kimi K3, aiming to secure up to 30% of revenue from K3-related services. Microsoft had earlier offered Kimi K3 through its Foundry platform, but via Fireworks AI, with the model ID FW-Kimi-K3. This time, AWS has integrated Moonshot AI directly as the model provider into Bedrock, a move that aligns more closely with the direct partnership model between Moonshot AI and overseas cloud providers previously disclosed by Reuters.

9 minutes ago

A whale has accumulated a total of 47,800 VVV tokens over the past two days, at an average acquisition price of $31.57.

According to on-chain analyst Ai Yi (@ai_9684xtpa), a wallet address withdrew 31,500 VVV tokens from KuCoin half an hour ago, valued at $1.06 million. The address established a VVV position two days prior, bringing its total holdings to 47,800 VVV tokens worth $1.507 million. Its average withdrawal price stands at $31.57, generating a profit of $87,000.

9 minutes ago

Huobi HTX has launched perpetual contracts for AMZU, IBIT, and CONL.

According to an official announcement, Huobi HTX launched perpetual contracts for AMZU/USDT, IBIT/USDT, and CONL/USDT on September 21, supporting long and short operations with leverage ranging from 1x to 20x.

9 minutes ago

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano