Yishi (@ohyishi)
@ohyishi
0 正在关注 0 粉丝
今日から、日本全国の PayPay 加盟店で、Binance Pay を使って USDT でそのまま支払えるようになりました！
stay safu🙏
At 18:31 UTC on September 24, 2026, Bitget’s security systems identified unauthorized transfers involving a limited number of hot wallets.
Our security team immediately activated emergency response procedures and began a full investigation.
Based on our current assessment, approximately $351.6 million in assets were affected. Bitget’s cold wallets and the overwhelming majority of platform assets remain secure and unaffected.
Most importantly, user funds remain protected.
The incident falls within the coverage of Bitget’s User Protection Fund, which currently holds more than $464 million.
Customer account balances remain accurate, and deposits and trading continue to operate normally.
As a precaution, withdrawals have been temporarily suspended while our teams complete a comprehensive security review.
We have identified and flagged the relevant transfer addresses and have formally engaged law enforcement agencies and leading on-chain security partners.
We are working around the clock to restore withdrawal services as soon as it is safe to do so.
Bitget will provide further updates through our official channels.
We will not speculate on the attack vector while the investigation remains ongoing. Our focus is on protecting users, securing all systems, and delivering complete transparency throughout this process.
显示更多
we hacked ledger.
the @OneKey_Anzen team has successfully reproduced a transaction replacement attack against ledger ethereum app 1.22.1 in our lab.
the bug is a race condition between the transaction display logic and the underlying transaction buffer.
an attacker can overwrite the transaction waiting to be signed while the user is still reviewing a legitimate one.
in simple terms:
- you see transaction a on your ledger.
- you approve transaction a.
- your ledger can end up signing transaction b.
- and you never see transaction b.
to reproduce this, we built the 1.22.1 ELF ourselves, fixed the speculos reset 502 issue, and got the full attack flow working end to end.
ledger fixed this in ethereum app 1.22.3.
if you’re still on an older version, update it.
显示更多
eight months ago, i handed my boss @cz_binance the prototype. he said, “keep going, make it great.”
today, in bhutan, i finally handed him the new one.
pretty proud to say i think we’ve built the best hardware wallet experience in the world. hope he likes it hehe.
the team won’t let me leak a single detail yet, so that’s all i can say for now. but give us a little more time. i think you’ll be meeting it very soon :)
显示更多
we’ve just launched the official website for @OneKey_Anzen.
anzen lab is onekey’s in-house security team. we secure our hardware, firmware, and apps before they ship, coordinate responsible disclosure with external researchers, and open source the tools and research behind our work.
found a real vulnerability? report it to us.
if it’s valid, we’ll pay a bounty and give you full credit.
显示更多
i have too many claude tokens and nowhere to use them. can i borrow against them? asking for a fren.
the little hero is healed and back home. can finally get back to work with a clearer mind. take care of yourselves, everyone. safety first ❤️🩹
my youngest child, mori, caught the flu shortly after he was born and is now in the hospital receiving treatment.
balancing family and a startup has been difficult, but it is part of growing into the responsibilities of adulthood.
i am getting closer to forty. there is still a great deal i want to do, and better products i want to build.
for now, i only hope mori recovers soon, and that every child stays safe and healthy.
显示更多
信任从来不会凭空产生。
它来自一家公司愿不愿意把代码公开，愿不愿意让所有人检查，愿不愿意把最核心的东西交给时间验证。
从 2019 年创立第一天起，OneKey 就选择全开源。从 App 到固件，任何开发者、安全机构，甚至 AI，都可以独立检查。基于 OneKey 代码 Fork 的钱包我见过不下十个。
我们最早从 Trezor 的开源方案出发，随后一步一步完成自主研发，建立自己的硬件、固件与软件体系，掌握核心技术，也拥有完整的自主知识产权。
这些年，OneKey 成为第一个，也是目前唯一一个被 bitcoin[.]org 收录的亚洲硬件钱包品牌。销量做到亚洲第一，全球第三。
但真正让我们珍惜的，从来不只是这些排名和记录。
是几轮牛熊过去，用户逐渐学会自托管，把资产存在自己的 OneKey 钱包；是行业最混乱的时候，还有人相信我们会把安全放在第一位；是很多人买下第一台 OneKey 后，又把它推荐给家人和朋友。
六年过去，我们越来越确信，安全要靠公开证明，信任要靠时间积累，口碑要靠每一台产品慢慢赢回来。
OneKey 不辜负每一份托付。
显示更多
中小交易所在 BTC 上涨过程中，要么挪用了用户的 BTC 去做空对冲（赌回调），要么直接把储备拿去做了其他投资，结果 BTC 持续走高，窟窿越来越大，最终无法兑付。
所谓的 Proof of Reserves 本身在很多小所那里就是一场表演，独立审计是没有的，负债端披露是不存在的，Merkle Tree 是可以被操控的，用户根本没法验证。
所以接下来看到中小交易所软跑路也不要奇怪，他们会吞下自己种的恶果。有币的赶紧提吧。
最好的上涨是在怀疑中上涨。
显示更多
Restaking 和各个链上的套娃，不就是 VC 攒局，项目方提供盘子，大户提供 TVL，币所提供流动性，筹码派发给相信叙事的散户吗，跟30年前黄河路上的游戏有什么区别。
显示更多
如果你能接受慢慢变富，那么现在最应该做的事，就是凑满10个 BTC，安全存进冷钱包，并且经住诱惑，2032年以前不要动。到时它会是你庆祝自己退休的最好礼物，足够你在世界任何城市过上惬意的生活。
显示更多
