Lưu trữ cho từ khóa: #Hackathon

Web3 security firm’s mistake exposes victims of $50m exploit to wallet drainer

Victims of DeFi lender Radiant Capital’s exploit were thrown into further disarray when a security firm erroneously shared a link to a wallet drainer while attempting to help them.

On Oct. 17,  web3 security startup Ancilia was criticized for its negligence after it redirected victims of the attack to an X account masquerading as the DeFi lender to dupe users into visiting a malicious site designed to drain users’ assets via approval phishing.

Security experts tricked

Ancilia was the first to report the exploit on Oct. 16, which saw Radiant Capital’s smart contracts on BNB Chain and Arbitrum compromised via the ‘transferFrom’ function, allowing attackers to drain over $50 million in assets, including USDC, WBNB, and ETH.

Following the breach, Radiant urged users to revoke all approvals using Revoke.cash, a tool that allows users to disconnect their wallets from potentially malicious smart contracts, to prevent further losses. 

This step was necessary because the attackers had gained control of several private keys, allowing them to control the DeFi protocol’s multi-signature wallet by transferring ownership.

Crypto scammers jumped on the opportunity, impersonating Radiant Capital on X and pushing fake links disguised to mimic the Revoke.cash platform. Ancilia, not realizing the scam, accidentally shared the fake post, while asking users to “follow the link,” which led straight to the wallet drainer.

Deleted post from Ancilia reposting a Radiant Capital impersonator | Source: Spreek/X

If unlucky victims clicked through and connected their wallets, approving the permissions, their funds would’ve been siphoned off.

Eagle-eyed community members were quick to point out the security firm’s blunder and criticized Ancilia’s negligence as a “‘trusted’ security account.” Subsequently, Ancilia deleted the post, issued an apology, and pointed users to the original Radiant Capital account.

The severity of these scams is highlighted by the fact that the bad actors orchestrate these approval phishing campaigns from hijacked X accounts that often bear the golden verification checkmark, which is designated to verified organizations on the social media platform.

Then, by slightly modifying the account’s name and handle, scammers are able to trick web3 users. In this instance, they changed the account name to “Radiarnt Capital” instead of “Radiant Capital” and altered the handle to “@RDNTCapitail” instead of “@RDNTCapital.” While these changes may seem easy to spot, many users often miss them at first glance.

At the time of writing, several instances of the aforementioned phishing post were still live under Ancilia’s posts.

Impersonation scams

Impersonating genuine projects to trick crypto investors has become one of the most common tools for scammers to lure victims onto phishing platforms. 

Earlier this year, cybersecurity firm SlowMist warned that over 80% of the comments under posts from major crypto projects were scams. Meanwhile, a ScamSniffer report pointed out that this tactic was the go-to move for scammers, causing millions of dollars in losses for crypto investors in February.

Just a day before the recent attack, bad actors were seen running a similar campaign to dupe WLFI investors. Scammers have even targeted Revoke Cash users by impersonating the service in early September and promoting a malicious site using Google Ads.

In related news, this was the second time Radiant Capital was exploited this year. Hackers were able to get away with $4.5 million from the protocol in a January flash loan attack. 

Tổng hợp và chỉnh sửa: ThS Phạm Mạnh Cường
Theo Crypto News

Developer shortage in the crypto space is where the real problem lies | Opinion

There’s a silent threat lurking beneath the surface—a developer shortage. While the crypto world thrives with a vibrant community of traders and enthusiasts, the developers who build the onchain products that drive long-term value are rare. Without a robust developer base, crypto’s potential to achieve mass adoption is significantly reduced.

Most people aren’t interested in trading or hyper-financial products—they want solutions that make their lives easier, more efficient, and more secure. We need builders who can create sustainable, long-term-focused products that go beyond short-term hype and speculation to achieve this. For crypto to reach mainstream adoption, blockchain technology must disrupt industries beyond just finance.

Here’s a brutal truth: crypto has roughly 1,000 times fewer developers than traditional tech. As of 2024, Electric Capital’s Developer Report indicates 26,037 monthly active web3 developers globally. In contrast, estimates from Evans Data Corporation and International Data Corporation suggest there are around 27 million developers worldwide, with GitHub reporting approximately 100 million active developers. This stark disparity highlights a significant problem: the crypto space lacks the developers needed to build the wide range of applications required for mainstream adoption.

Consider the example of Base, a project that has prioritized creating a developer-friendly environment. By providing a comprehensive suite of tools, documentation, and resources, Base simplifies the process of building onchain. This approach has attracted numerous developers, both experienced and junior, who are already working on a wide range of decentralized applications and tools. Base’s success demonstrates the powerful impact a vibrant developer ecosystem can have on crypto’s growth and adoption with a more mainstream audience. When developers are empowered with the right tools and incentives, they can create applications that will bring millions of users into the crypto ecosystem.

Developer shortage is the real pain

The shortage of web3 developers stems from several challenges. One major issue is the “cold start problem” in crypto. It would be easier to onboard new developers if they were already onchain users.  However, to onboard them as users, we need a broader range of apps beyond just financial use cases, and creating these apps requires more developers.

Another challenge is the perception of risk associated with becoming an onchain developer. Crypto is still viewed by many as a shady, unregulated area linked to scams and market volatility. Additionally, the lack of job security and clear career paths makes it a less appealing option compared to more stable, established fields. Consequently, the crypto industry tends to attract younger developers who have less to lose, while experienced professionals remain cautious about the potential risks.

In my personal opinion, building onchain is far more fun than building online, but this isn’t always apparent to developers from the outside. To them, crypto can seem dominated by financial products, shady projects, and complex technology, leaving little room for meaningful and impactful work.

So the question arises: How can we make building in crypto more attractive?

To address this developer shortage, the industry has leaned heavily on grants and hackathons. While these are valuable tools, they often result in crypto companies competing for the same limited group of existing crypto developers instead of working together to bring more builders onchain. Hackathons, while exciting and full of potential, are typically one-off events that don’t provide the long-term support developers need to sustain their projects. Grants are often too bureaucratic and centralized, with lengthy application processes and strict requirements that can be discouraging for new builders. 

Universal builder income is a new way

What if we could offer developers a more consistent and reliable way to make ends meet? This is where universal builder income comes in. UBI, an idea pioneered by Base and coined by Jesse Pollak, represents a novel approach to distributing financial incentives to builders more efficiently. By “builder,” I’m referring to all people directly involved in shipping software, not exclusively developers.

Think of UBI as a regular paycheck for new onchain builders—one that doesn’t require an application process but instead rewards actual contributions and verified reputations. We’re already seeing the early stages of UBI in action. For example, Drips Network—a decentralized toolkit aimed at funding essential software dependencies—is exploring how to distribute financial incentives more effectively and at scale.

For crypto to succeed, we need more builders. UBI offers a way to attract more builders onchain by acknowledging and supporting those who are committed to shipping great software. By providing a safety net, UBI empowers developers to focus on creating innovative solutions rather than worrying about their next paycheck. Additionally, UBI can further decentralize the crypto ecosystem. By distributing financial incentives directly to individual builders, we can reduce the reliance on centralized entities and foster a more equitable distribution of rewards. Eliminating intermediaries ensures that value flows directly to the edges of the network, prioritizing new over established builders.

Critics might question, “Who funds this?” However, we’re already investing substantial resources to attract developers, much of which is wasted on inefficient corporate strategies like employer branding or arbitrary sponsorships and events. By contrast, imagine a future where a portion of profits or ecosystem transaction fees automatically supports a UBI pool, rewarding those who are actively building the future of crypto.

UBI isn’t just about efficiency—it also has the potential to attract a more diverse group of developers, including those from underrepresented backgrounds. By providing financial incentives directly to individuals rather than startups, UBI fosters a more inclusive and experimental environment, unlocking a new wave of creativity and innovation. This approach can bring a variety of global perspectives, leading to more diverse solutions and driving crypto adoption in novel ways. Talent is everywhere, so the next big breakthrough could come from anyone, anywhere.

Anu Atluru talks about “The Rise of the Software Creator,” and it paints a beautiful picture: a future where anyone can be a builder. With AI making shipping software easier, we’ll see a wave of “low-code builders that specialize in concept, creativity, and distribution more than in technical prowess.” UBI fuels this movement by giving these software creators the freedom to experiment and chase their ideas. With more builders empowered, we can expect an explosion of apps that go beyond tooling—they become art, games, and experiences that enrich our lives.

It’s action time for crypto leaders

UBI is a transformative concept with various potential implementations. It represents a value system and worldview, offering a general direction rather than an exact recipe.

To the crypto leaders reading this: it’s time to start your own UBI experiments. Explore different funding models, evaluate their effectiveness, and share your insights with the community. The more we experiment, the closer we get to realizing universal builder income.

The crypto industry stands at a crossroads. We can either maintain the status quo or innovate to create a more resilient and inclusive ecosystem. By supporting builders through initiatives like UBI, we can ensure that the next generation of software creators has the tools and resources they need to succeed. The road to mass adoption doesn’t lie with traders but with the builders who will develop the applications and services that integrate crypto into the daily lives of billions.

Tổng hợp và chỉnh sửa: ThS Phạm Mạnh Cường
Theo Crypto News

IBM công bố người chiến thắng cuộc thi hackathon trí tuệ nhân tạo Call for Code toàn cầu

Hackathon toàn cầu, hiện đã bước sang năm thứ sáu, mang đến cho người tham gia quyền truy cập vào công nghệ AI, điện toán đám mây và chuỗi khối tiên tiến.

David Clark Cause, IBM, Văn phòng Ủy viên Nhân quyền Liên Hợp Quốc và Quỹ Linux đã công bố những người chiến thắng trong cuộc thi hackathon Kêu gọi Mã năm 2023 vào ngày 6 tháng 12.

Call for Code là sự kiện thường niên lớn nhất thuộc loại này, quy tụ những người tham gia từ hơn 180 quốc gia, những người đã tạo ra tổng cộng 24.000 đơn đăng ký cho đến nay, theo David Clark Cause.

Cuộc thi năm nay tập trung vào việc giải quyết “các vấn đề toàn cầu cấp bách nhất của thời đại chúng ta” bằng cách sử dụng các công nghệ sẵn có, bao gồm cả dịch vụ trí tuệ nhân tạo (AI) sáng tạo của IBM, watsonx. Nó bao gồm các giải thưởng lớn được trao cho ba hạng mục người tham gia riêng biệt: nhà phát triển, trường đại học và nhà cung cấp/công ty khởi nghiệp độc lập.

Những người chiến thắng dự kiến sẽ nhận được giải thưởng trị giá 50.000 USD cộng với hỗ trợ phát triển từ IBM và các đối tác của IBM.

Và người chiến thắng là:

AGNO, một nhóm từ Hexaware Technologies, đã giành chiến thắng ở hạng mục nhà phát triển. Nhóm đã phát triển nền tảng AI Farmistar để giúp những người nông dân nhỏ phát triển các chiến lược quản lý cây trồng dựa trên những hiểu biết sâu sắc trong thời gian thực.

Người chiến thắng ở hạng mục đại học là Phyto, nhóm sinh viên đến từ Đại học Sydney. Họ đã sử dụng IBM Watson Studio và IBM Environmental Intelligence Suite để xây dựng công cụ phân tích thời tiết và không gian địa lý được hỗ trợ bởi AI nhằm giúp nông dân phục hồi đất bị ô nhiễm bằng các quy trình tự nhiên.

Cuối cùng, trong hạng mục nhà cung cấp/công ty khởi nghiệp độc lập, Synergy Squad, một nhóm từ công ty kỹ thuật số Persistent, đã giành điểm cao nhất cho Offshelf, nền tảng giảm thiểu rác thải tiêu dùng hỗ trợ chuyển văn bản thành giọng nói của họ.

AI sáng tạo

Sự khởi đầu của kỷ nguyên biến thế được đào tạo trước (GPT), với ChatGPT của OpenAI dẫn đầu, đã dẫn đến sự phổ biến rộng rãi của các công nghệ AI tổng quát. Tuy nhiên, bất chấp sự phổ biến của các giao diện kiểu “chatbot” được đào tạo trên các tập dữ liệu có kích thước internet, các mô hình hướng tới người tiêu dùng phổ biến nhất thường không được coi là đủ chính xác hoặc đủ an toàn cho doanh nghiệp.

Tuy nhiên, AI tổng quát được phát triển và đào tạo bằng dữ liệu doanh nghiệp và tập trung vào bảo mật, hiện đóng một vai trò lớn trong doanh nghiệp. Các mô hình nền tảng Titan của Amazon và watsonx của IBM nằm trong số những mô hình được sử dụng rộng rãi nhất.

Nền tảng watsonx là phiên bản tổng hợp của IBM dành cho các giải pháp AI tổng hợp tập trung vào doanh nghiệp. Nó bao gồm các mô hình nền tảng, kho dữ liệu và bộ công cụ dành cho nhà phát triển.

Bên ngoài hộp trò chuyện và ngăn xếp CNTT, AI tổng quát có thể hoạt động như một giao diện có thể điều chỉnh cho phép các kỹ sư, nhà phát triển và người dùng đưa ra những hiểu biết sâu sắc trong thời gian thực. Như những người chiến thắng cuộc thi ở trên đã chứng minh, điều này có thể hữu ích cho mọi thứ, từ dự báo thời tiết ở quy mô trang trại đến hạn chế rác thải sinh hoạt.

Tổng hợp và chỉnh sửa: ThS Phạm Mạnh Cường
Theo Coindesk

Exit mobile version