Lookonchain APP

App Store
Feeds Articles

SlowMist: Beware of malicious GitHub repositories disguised as Solidity interview practice projects that can steal wallet data.

3 days ago

SlowMist has issued a security alert, stating it received user reports of a GitHub repository named "sol-live" disguised as a Solidity interview practice project that actually harbors a data-stealing backdoor. According to analysis, attackers embedded malicious commands in the repo files, which can download and execute remote scripts when the project’s custom terminal configuration is launched. The malicious payload includes three core modules: collecting browser login databases, crypto wallet extension storage, and macOS Keychain files; scanning and uploading local files; and executing remote commands, providing interactive shell access, and monitoring clipboard content. SlowMist noted that on macOS and Linux systems, the attack chain requires users to actively launch the malicious terminal configuration to execute, while the execution chain on Windows remains unconfirmed due to potential quotation mark issues. Additionally, researchers found 8 other GitHub projects using similar terminal configuration download-and-execute techniques, though the actual infection scope and whether data has been exfiltrated are still unconfirmed. SlowMist advises developers to carefully check files and terminal launch parameters before using untrusted projects. If a malicious configuration has been executed, or if the host’s compromise cannot be ruled out, immediately isolate the relevant device and conduct a security investigation. At the same time, migrate wallet assets via a trusted device and replace related account credentials to reduce the risk of further losses.

Source
Add to Favorites Download image Share x Copy link
Relevant content

Survey: 79% of enterprise GPUs are idle at least half the time, while 70% of enterprises still plan to expand their AI platforms.

Beating AI News Flash, a Q3 2026 survey compiled by VentureBeat Intelligence shows that 79% of enterprise respondents report their GPU computing power is idle at least half the time, yet 70% of surveyed firms plan to introduce, expand, or replace AI computing platforms over the next 12 months. Return on investment (ROI) assessments are also lagging. The survey found that among 64 respondents planning to adopt new AI platforms, 58 lack finance-audited ROI data, accounting for 91%. Additionally, while enterprises underutilize their own GPUs, they continue to access closed-source models from providers like OpenAI and Anthropic via API calls, creating a mismatch between idle hardware resources and model call expenditures. As AI Agents gain popularity, token consumption and inference costs from multi-step tasks are drawing growing attention. Gartner forecasts that by 2028, inference costs for a single Agent workflow will surge more than fivefold. The report notes that enterprise AI competition is shifting from competing for computing power to improving resource utilization and controlling per-task costs, with specific measures including migrating routine tasks such as classification and summarization to open models, optimizing context caching, and reducing unnecessary multi-Agent collaboration. However, GPU idleness may also stem from enterprises reserving computing power for peak demand or planning to replace outdated platforms; the survey data alone does not directly confirm the formation of an AI bubble.

6 minutes ago

South Korean high-net-worth investors sold off 148.3 billion won worth of Samsung and SK Hynix stocks, shifting to semiconductor leveraged ETFs.

Approximately 7,900 high-net-worth investors in South Korea with financial assets over 3 billion won net sold Samsung Electronics and SK Hynix stocks between October 1 and 20, totaling 5.59 billion won and 9.24 billion won respectively, for a combined 14.83 billion won (around $11.2 million). Meanwhile, funds shifted to leveraged ETFs: KODEX Semiconductor Leveraged ETF saw net purchases of 33.2 billion won in the same period, while KODEX Leveraged ETF and KODEX 200 ETF recorded net buys of 22.5 billion won and 10.5 billion won respectively; the inverse double-leveraged ETF tracking the KOSPI 200 index was net sold 8 billion won. Data shows these investors did not fully exit South Korea’s semiconductor sector and stock market, but instead shifted from direct holdings of chip leaders to betting on gains in the sector and broader market via leveraged ETFs. However, leveraged ETFs’ daily return-tracking mechanism may amplify losses in volatile markets, leaving investors exposed to higher drawdown risks.

6 minutes ago

Trillion-dollar AI investment has propped up the U.S. economy, but the productivity miracle has yet to materialize.

AI infrastructure investment is emerging as a key pillar of U.S. economic growth, though it has yet to deliver a noticeable long-term productivity surge. Economists project that the U.S. real GDP annualized growth rate for the third quarter will come in at around 3%, driven primarily by consumer spending and AI-related business investment, with corporate capital expenditure on data center construction and computing equipment purchases continuing to expand. However, this investment growth does not mean AI has significantly lifted overall economic efficiency. Currently, the U.S. potential economic growth rate remains stuck at roughly 2%, and the Congressional Budget Office (CBO) forecasts a long-term potential growth rate of approximately 1.8%. Economists note that recent improvements in labor productivity cannot yet be confirmed as AI-driven, and more data is needed to validate related gains. Meanwhile, the U.S. economy still faces inflationary pressures. S&P Global data shows that the U.S. October flash Composite PMI fell to 57.6 from September’s 58.4, but the Output Prices Index rose to 59.8, its highest level since August 2022, signaling that corporate cost pressures continue to intensify. Whether AI investment can eventually translate into sustained productivity gains remains a key factor for the U.S. economy to break through its long-term growth bottleneck. At this stage, trillions of dollars in investment plans are insufficient to prove that the U.S. has entered a new phase of sustained economic growth acceleration.

6 minutes ago

Bitcoin treasury firm Strive has signed agreements with seven institutions, and plans to issue up to $1 billion in preferred stock via an At-The-Market (ATM) offering.

According to U.S. SEC filings, Bitcoin treasury firm Strive signed a sales agreement on October 26 with seven institutions: Cantor Fitzgerald, Barclays, Clear Street, StoneX, B. Riley Securities, Maxim Group, and H.C. Wainwright. The company plans to sell up to 15% of its Series A perpetual preferred stock (ticker: SATS) with a total offering value of up to $1 billion via an at-the-market (ATM) offering on an irregular basis. The filings show the preferred stock carries an annual dividend rate of 15% and a $100 par value per share. Strive may conduct the issuance through existing trading venues such as Nasdaq or other legal channels based on market conditions, with the seven firms acting as selling agents entitled to a maximum commission of 2% of the total proceeds per sale. This offering is an additional issuance, separate from the 7 million SATS preferred shares already issued. The filings add that Strive may issue shares on an irregular basis depending on market conditions, with the actual issuance size and timing subject to the company’s arrangements and market environment.

6 minutes ago

Apple drops 1.44% in pre-market trading, with multiple reports of screen damage on iPhone Duo models, and the hinge design may face readjustment.

According to BIT (Bit.com) market data, Apple’s pre-market U.S. stock dropped 1.44%. On the news front, Apple’s first foldable smartphone, the iPhone Duo, has seen screen damage near its hinge since launching in major markets on October 23. User-uploaded photos show some devices have white ray-like cracks starting at the hinge’s center and extending to the lower right of the screen. Industry insiders note the defect is concentrated at the same hinge position, likely tied to hinge design, meaning Apple may have to redesign the relevant structure. Reports add that Apple faced hinge supply challenges during R&D: its initial first supplier, U.S.-based Amphenol, was replaced by Taiwan’s Xinri Xing (Sunny Precision) due to lower-than-expected production yield, but the latter also encountered manufacturing difficulties and only supplied "golden samples" that met standards. Apple previously stated the iPhone Duo’s hinge comprises over 100 components and uses a 3D-printed hinge module. With the product now in mass production, Apple may resolve the defects while minimizing design changes, possibly by reducing hinge components. Reports highlight the hinge issues could impact product delivery and sales performance. Per Apple’s supply expectations shared with suppliers, as of the end of this year, component supply corresponding to the iPhone Duo’s full production capacity is around 6 million units. Separately, component supplier Fine M-Tec has stated that recent quality issues with the related products are unrelated to the components it supplied for assembly.

6 minutes ago

QCP: BTC drops below $80,000, market focuses on the Federal Reserve's resolution and tech giants' earnings reports.

QCP Capital noted in its daily market report that BTC fell below $80,000 over the weekend amid news of the Middle East situation and outflows from Bitcoin spot ETFs, triggering liquidations of leveraged long positions. Currently, BTC has retreated to the bottom of its recent trading range, with market participants awaiting the U.S. Federal Reserve’s policy-setting meeting scheduled for October 27-28. QCP added that earnings reports from Microsoft, Google parent Alphabet (due Wednesday U.S. time) and Amazon (due Thursday) will act as key market variables. If the results validate the justification of massive AI-related capital expenditures, tech stocks could see valuation recovery; conversely, selling pressure on AI trades may intensify further. Additionally, oil prices, down roughly 2%, are another major factor weighing on markets. On the macro front, the Fed is widely expected to hold interest rates steady, though market pricing puts the probability of a December rate hike at nearly 84%, with Chair Warsh’s press conference drawing close attention. The U.S. 10-year Treasury yield stands at around 4.96%, down from its recent one-year high near 5.3%. QCP’s key price levels are: BTC support at $78,000, resistance at $86,000; ETH support at $2,150, resistance at $2,500. Separately, ETH spot ETFs have recorded outflows for four consecutive weeks.

6 minutes ago

Hot feeds

A trader profits $448K by monitoring #Binance's new listings!

2024.12.13 17:37:29

Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.

2024.12.16 14:48:36

A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.

2024.12.14 10:35:27

When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.

2026.01.31 18:37:29

A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.

2025.01.05 16:05:18

A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!

2024.12.03 23:09:08

 More

Hot Articles

Follow us

X

Follow

Telegram

Join

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano