Lookonchain APP

App Store

Vercel targets long-term API keys: labels them "insecure" by the end of the year, set to remove entirely next year.

50 minutes ago

Beating AI Express: Vercel announced it will phase out long-term static keys from its Marketplace. Starting November 30, third-party services that still rely on long-term keys and do not support Vercel OIDC authentication will be marked as "insecure". By January 2027, non-compliant providers will be delisted, with Vercel’s own APIs and native integrations required to follow the same standards. Long-term keys are non-expiring credentials, often stored in environment variables to enable apps or AI Agents to access services like databases. If leaked, attackers can exploit them indefinitely. Vercel’s OIDC, by contrast, allows programs to obtain short-lived credentials based on their own identity, with restricted access scopes and permissions. After credentials expire, the SDK automatically refreshes them, and caching reduces extra requests, eliminating the need for developers to manually rotate keys repeatedly. Vercel has faced such risks before: in April this year, third-party AI tool Context.ai was hacked, letting attackers breach Vercel’s internal systems and access some customers’ environment variables. The company only announced full remediation on October 16. Vercel also disclosed that past key rotation efforts consumed thousands of engineering hours. The company surveyed over 1,000 SaaS providers and found only 8.4% support the more secure authentication method. Long-term keys are widely used for their simplicity, while short-lived credentials are safer but more complex to configure and may increase network latency. Vercel is mitigating these costs via SDK and automatic caching, and using Marketplace listing eligibility to push providers to adopt more secure authentication practices.

Relevant content

Bitcoin Core is adjusting its security policy, with some vulnerabilities to be patched and disclosed immediately.

Bitcoin Core is revising its security vulnerability disclosure policy, as large language models (LLMs) have significantly lowered the threshold for discovering certain software flaws. Bitcoin Core developer Antoine Poinsot said Thursday on the Bitcoin Developers Mailing List that for vulnerabilities easily uncovered via simple LLM prompts, delayed disclosure no longer provides sufficient protection and instead delays the release of fix versions. Under the new policy, for easily discoverable vulnerabilities, Bitcoin Core will roll out fixes as quickly as possible for all still-maintained major versions, and release corresponding security advisories simultaneously. Other vulnerabilities will still be disclosed in phases based on severity: low-severity flaws will be made public two weeks after the major version containing the fix is released; medium and high-severity vulnerabilities are typically disclosed two weeks after the last affected version ends its maintenance. Critical vulnerabilities that severely impact Bitcoin’s core security will follow a separate process. AI-assisted security research is bringing new pressures to the Bitcoin ecosystem. This August, the Bitcoin Red Team reported nearly 5,000 potential issues found across 390 projects; Core Lightning developers also urged node operators to upgrade software or take it offline temporarily after receiving multiple AI-generated vulnerability reports. The policy adjustment aims to shorten the exposure window of easily exploitable vulnerabilities and accelerate the delivery of fix versions.

8 minutes ago

Elon Musk donated over $445 million during this U.S. midterm election cycle, and injected an additional $77 million into America PAC in October.

According to filings with the U.S. Federal Election Commission (FEC), Elon Musk injected $77 million into the super political action committee (super PAC) America PAC he supports in the first two weeks of October, bringing his total donations for this election cycle to over $445 million, making him one of the largest individual donors to a super PAC in U.S. political history. America PAC spent $43 million during the same period, ending with a cash balance of $46.5 million. Since August, the organization has allocated $43.2 million to voter outreach and get-out-the-vote efforts, and spent $8.8 million on digital media and text messaging services. The funds are primarily directed to key congressional races in states including Texas, Ohio, and Michigan, with spending on Texas Senate races being particularly prominent. Additionally, Musk donated $158 million to the Senate Leadership Fund, which supports Republican Senate candidates, in September. As the U.S. midterm elections approach, both major parties are ramping up financial contributions; as of the end of the third quarter, Trump, the Republican Party, and congressional super PACs backing Republican candidates have raised a total of $2.1 billion, exceeding the $1.3 billion raised by Democratic-aligned organizations.

8 minutes ago

Inside Story: OpenAI Fires 3 Security Researchers Amid Leak Investigation Involving External Audit Partner

Beating AI Insight Flash: OpenAI fired three security researchers at the end of September for violating sensitive information management rules. The Wall Street Journal disclosed more details on October 22: the company suspected the three of leaking model architecture secrets to external security expert Ryan Greenblatt, and demanded they unlock their personal phones. Investigators found that some of the chat logs between the researchers and Greenblatt on Signal had auto-delete enabled. A week later, the three were summoned to a meeting and fired simultaneously. Greenblatt had participated in OpenAI’s external security investigations, and one of the fired researchers was responsible for collaborating with external security agencies. All three denied leaking secrets, stating the dismissal was likely related to their advocacy for AI safety oversight. One of them also claimed he was fired for accidentally opening an executive email he had access to. OpenAI denied retaliation, emphasizing the dismissal stemmed from violations uncovered in internal investigations, not employees raising safety concerns. However, the company did not release full details of the violations, and the three researchers said they never received a written explanation.

8 minutes ago

Trade.xyz launches JIO Pre-IPO perpetual contract trading

Trade.xyz announced on social media that the pre-IPO perpetual contract (IPOP) market for JIO is now live. Each JIO unit corresponds to one common share of Jio Platforms Limited, quoted in US dollars. Currently, JIO operates as a pre-IPO market reflecting expected share prices, and is set to convert to a standard XYZ perpetual contract after Jio Platforms’ IPO. Post-IPO, oracles will convert the underlying stock’s rupee price to US dollars at the prevailing USD/Indian rupee exchange rate. Jio Platforms provides digital connectivity and services in India.

8 minutes ago

Samsung’s Taylor 1 wafer fab has launched follow-up equipment investment, ramping up efforts to achieve 2-nanometer mass production.

According to a South Korean media report on October 23, Samsung Electronics has launched follow-up equipment investment at its No. 1 wafer fab in Taylor, Texas, completing the final pre-mass production phase of setup. This facility is Samsung’s first wafer foundry mass production line in the U.S., targeting 20,000 wafers per month of 2-nanometer capacity by the second half of next year. Samsung has recently ordered equipment, initially to meet a monthly capacity of around 6,000 wafers, with the equipment arriving gradually. The No. 1 fab broke ground in 2022, with Samsung’s total investment reaching approximately $37 billion. It is scheduled to begin operations by the end of 2026 and start mass production of EUV-based 2-nanometer chips from 2027. Samsung’s 2-nanometer yield has risen from around 60% earlier this year to roughly 80%, meeting mass production requirements. In terms of orders, the fab has secured full 2-nanometer orders before launch, with clients including Tesla’s AI5 and AI6 chips, Broadcom’s communication chips, and Arm’s smart device chips. Samsung and Tesla signed a $16.5 billion long-term supply contract in July 2025, valid through the end of 2033. Expansion plans do not stop here. Samsung plans to break ground on Taylor’s No. 2 fab in early November, which will be 1.5 times the size of the No. 1 facility, targeting mass production of 2-nanometer chips by 2030. Samsung’s total investment in central Texas exceeds $37 billion, and the U.S. CHIPS and Science Act has approved up to $4.745 billion in direct subsidies. The competitive landscape remains to be tested. TrendForce data shows TSMC held a 72.5% global wafer foundry revenue share in the second quarter of this year, while Samsung accounted for 5.9%. The Taylor fab’s capacity ramp and yield stability will determine whether Samsung can convert its order momentum into a market share recovery.

8 minutes ago

A SanDisk whale liquidated all positions and exited the market, incurring a $4.58 million loss on its SNDK long positions.

According to TradingBeats' monitoring, a large whale wallet starting with 0x469e liquidated its remaining 5,000 long positions in Sandbox (SNDK) early this morning, with a total closing transaction value of approximately $6.236 million. The final round of liquidation alone incurred a loss of around $2.836 million. The average entry price for this position stood at roughly $1,814.45, while the actual average closing price was about $1,247.20, a roughly 31.3% drop from the cost. Statistics indicate that the whale opened its SNDK long positions on September 23 and fully exited all holdings today, resulting in a total trading loss of approximately $4.583 million.

8 minutes ago

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano