News

1. Chinese Meme coins continue their upward trend, with the market cap of a certain exchange's native token surpassing 380 million USD; 2. Trump: It is absolutely unacceptable for Iran to possess nuclear weapons; 3. Former US Treasury Secretary Yellen: Still believes the Federal Reserve may cut interest rates this year; 4. A user attempted to execute a trading strategy using AI, with their account growing from 100 USDT to a peak of around 200,000 USD; 5. In the NBA Play-In Tournament, the Hornets defeated the Heat, with an account holding over 1 million USD making about 210,000 USD profit from a single game; 6. RAVE surpassed 19 USD to reach a new all-time high, with daily liquidations amounting to 29.16 million USD; 7. Farcaster clarified that it will not issue a token, stating that related token discussions originated from the forked project Hypersnap; 8. Bitcoin spot ETFs saw a total net inflow of 411 million USD yesterday, with BlackRock's IBIT leading the way with a net inflow of 214 million USD.

On April 15, Ethereum has recently strengthened against Bitcoin, with the ETH/BTC exchange rate rising to approximately 0.0313, the highest level in three months, but still far below the peak in January. The improvement in this ratio is attributed to strong on-chain activity for Ethereum: the number of new users surged by 82% in the quarter, trading volume reached an all-time high, and the total supply of stablecoins hit a historic peak of $180 billion. Analysts state that Ethereum must reclaim the 0.035 ETH/BTC level in weekly closing to indicate that the rotation of funds towards Ethereum is sustainable rather than a temporary rebound, especially since the current price of Ethereum is still over 50% lower than its 52-week high.

According to a report from CriptoNoticias, an independent security researcher has disclosed a prompt injection vulnerability in a certain exchange's AgentKit, which allows attackers to induce the AI agent to execute unauthorized token transfers via malicious instructions, without requiring manual confirmation. This vulnerability has been validated through actual transactions on the Base Sepolia testnet. Additionally, the researcher pointed out that the vulnerability also exposes the unlimited authorization process for ERC-20 tokens, as well as remote server access permissions within the same execution context of the agent, expanding the risk beyond merely having the wallet drained. However, the report did not specify which particular infrastructures might be affected. The vulnerability was submitted to the exchange’s bug bounty program in February and was officially validated. It was ultimately classified as medium risk and awarded a $2,000 bounty. However, the researcher emphasized that the actual impact of the vulnerability is far greater than the official rating.