PA Daily | Security personnel have discovered new vulnerabilities in iOS 16, and cryptocurrency practitioners should not use jailbroken devices; BAYC floor prices hit a new low this year

Today's news reminder

1. Slow Mist: Security personnel discovered new vulnerabilities in iOS 16 and reminded cryptocurrency practitioners not to use jailbroken devices

2. The Shibarium network is scheduled to reopen to the public next Monday

3. BAYC #8585 with rare attributes was sold at 153 ETH, and the highest transaction price in history was 777 ETH

4. Optimism announced the 14th Grants list: a total of 1,571,700 OPs were allocated, a decrease of 87,000 OPs from the previous issue

5. TRM Labs: North Korea-linked hackers have stolen more than $200 million in cryptocurrency this year

6. BALD deployers transferred 5,448 ETH worth about $9.1 million to Binance today

NFT

BAYC #8585 with rare attributes was sold at 153 ETH, and the highest transaction price in history was 777 ETH

According to NFTGo data, BAYC #8585 with rare Trippy FUR and King's Crown HAT attributes was traded at a price of 153 ETH 1 hour ago. This NFT was traded at 777 ETH in October 2022, which is the highest transaction price in history.

Address Huang Licheng spent 38 WETH to buy BAYC #9770

OpenSea data shows that Huang Licheng's address spent 38 WETH to buy BAYC #9770. In addition, the floor price of BAYC once fell below 24ETH today, setting a new low this year.


Project Dynamics

Curve proposes disabling Chainlink limits in all crvUSD price oracles

Curve publishes a proposal to disable the Chainlink limit of the crvUSD price oracle. The proposal states that Chainlink currently enforces a “safety limit” of +/- 1.5% on all crvUSD price oracles. This means that if the Chainlink price deviates too much (1.5%) from the internal oracle price (EMA), it will use Chainlink's source. When the market is highly volatile, Chainlink price can cause unnecessary losses. Price oracles using Chainlink limits can still be biased if volatility is high enough. It is therefore recommended to disable Chainlink restrictions in price oracle contracts for all markets, except the old frxeth market (which will be replaced by the new market soon). This is done by calling set_use_chainlink(False) in all price oracle contracts of the ControllerFactory owner (ownership DAO).

The BNB Bridge hacker liquidation account still has over $124 million in debt, and will be liquidated again when the BNB price drops to $211

Arkham tweeted that BNB Chain recently began liquidating the accounts of the BNB Bridge hackers. Last year, BNB Bridge hackers used a vulnerability to steal 2 million BNB tokens from BNB Chain’s Token Hub. Instead of selling assets, the hacker deposited 900,000 BNB and loaned nearly $150 million in stablecoins to Venus Protocol. Since October 2022, the hacker has maintained this position for almost a year without interacting with the Venus contract. Before the liquidation, their accounts still held $204.1 million in BNB on Venus. Therefore, the BNB Chain core team proposed to the Venus management department that they take over the debt of the hacker. Arkham said that the BNB Chain team previously transferred USD 60 million to the BNB Bridge hacker liquidation account. Since the price of BNB fell below USD 220 for the first time on Thursday, the position entered a liquidation state. The team liquidated $30 million in debt in three separate transactions, resulting in 146,150 stolen BNB. The current settlement account balance is 30 million US dollars, which is used to pay off more debts, and the total debt is still more than 124 million US dollars. The team will liquidate again when the BNB price drops to $211.

Slow Mist: Security personnel discover new vulnerabilities in iOS 16, reminding cryptocurrency practitioners not to use jailbroken devices

23pds, Chief Information Security Officer of SlowMist, tweeted that cybersecurity researchers have discovered a new post-exploitation persistence technique in iOS 16: even if the victim's Apple device is offline, the technique can be exploited quietly to access the device. The vulnerability is only possible on devices that have been exploited or jailbroken. Attackers trick victims into thinking their device's airplane mode is working, when in fact the attacker has implanted a fake, artificial airplane mode after successfully exploiting the device, which edits the user interface to display the airplane mode icon, and cuts off Internet connectivity for all applications except the attacker application. SlowMist reminds cryptocurrency practitioners not to use jailbroken devices for convenience.

Derivatives market Thales: Core developer wallet stolen, resulting in a loss of $25,000, user funds are not affected

The derivatives market Thales announced on Twitter that its BNB Chain (BSC) core developer wallet was stolen, and many administrator robots or hot wallets used for temporary deployment programs may be attacked. The attack resulted in a loss of $25,000 to the protocol, and user funds were not affected. Due to this attack, support for BSC will be officially discontinued. Remind users not to interact with any Thalesmarket contract on BNB Chain and revoke the corresponding authorization. All funds are safe on chains like Optimism, Arbitrum, Polygon, and Base.

The Shibarium network is scheduled to reopen to the public next Monday

According to official news, Shibarium released the latest progress, saying that it is currently strengthening security measures and conducting in-depth testing. Shibarium is currently able to generate blocks normally in the internal test mode. The team will continue to expand and test, and the Shibarium network is scheduled to reopen to the public next Monday. According to previous news, due to the traffic exceeding expectations after Shibarium went online, the network entered a failsafe mode and stopped operating to ensure the safety of funds.

Encryption mining company BIT Mining’s revenue in the second quarter was US$74.1 million, down 62% from the same period last year

Cryptocurrency mining company BIT Mining released its unaudited financial report for the second quarter. As of June 30, 2023, BIT Mining's revenue in the second quarter of 2023 was US$74.1 million, a decrease of US$121.4 million from the second quarter of 2022 and a year-on-year A decrease of 62.1%, an increase of 1.6% from the first quarter of this year. In the second quarter, BIT Mining produced 29.4 million DOGE and 16,027 LTC (revenue of about 3.6 million US dollars), and the output of Bitcoin was 22.6 (revenue of about 600,000 US dollars).

Operating loss for the second quarter of 2023 was $1.5 million, a decrease of $19 million from the second quarter of 2022 and a decrease of $4.5 million from the first quarter of 2023. In the second quarter of 2023, BIT Mining's net loss was US$0.9 million, a decrease of 95.1% from the same period last year and a decrease of 81.6% from the previous year.

Optimism announced the 14th Grants list: a total of 1,571,700 OPs were allocated, a decrease of 87,000 from the previous period

Optimism Grants announced the list of the fourteenth phase. This time, a total of 1,571,700 OPs were distributed, a decrease of 87,000 OPs from the previous phase; a total of 97 applications were received, and 28 projects were finally approved. The projects that received the most grants are: Clearpool, Idle, Liquity 1, and Wombat Exchange each received 150,000 OPs. In addition, applications for the fifteenth batch are already open, with the final deadline of August 31.

Important data

Data: A whale may sell MATIC and buy PEPE worth $1.6 million

According to monitoring by Ember, an analyst on the chain, a certain whale transferred 4.93 million MATICs to OKX 9 hours ago, worth $2.84 million. The whale transferred PEPE worth $1.6 million from OKX 5 hours ago.

TRM Labs: North Korea-linked hackers have stolen more than $200 million in cryptocurrency this year

North Korea-linked hackers have already stolen more than $200 million in cryptocurrency in 2023, accounting for more than $200 million of all stolen cryptocurrency in 2023, according to a report released Friday by blockchain intelligence firm TRM Labs. More than 20%. Over the past five years, cybercriminals have stolen over $2 billion in funds.

TRM Labs stated that North Korean hackers used a variety of techniques to launder stolen funds, mainly using currency mixers after cross-chaining, and then quickly cashing out through exchange accounts. These exchanges usually have low KYC or anti-money laundering standards. After OFAC sanctioned Tornado Cash, Sinbad is often used for currency mixing.

BALD deployers transferred 5,448 ETH worth about $9.1 million to Binance today

On-chain data shows that BALD deployers have transferred 5,448 ETH (approximately $9.1 million) to Binance today. 3 hours ago, the address transferred 2,000 ETHs from the Base network and then transferred 2,000 ETHs to Binance. 2 hours ago, it exchanged about 1,517 wstETHs for about 1,724 ETHs through Uniswap, and then transferred 1,725 ETHs to Binance. 1 hour ago, about 1,517 wstETH were exchanged for 1,724 ETH, and then 1,723 ETH were transferred to Binance.

Previously, on August 14th, the BALD deployer bridged 7,000 ETH from the Base network back to Ethereum, and deposited 2,100 ETH into Kraken.