研究人员警告称,某些加密硬件钱包存在一个新漏洞,该漏洞允许攻击者私下签署未经授权的比特币交易并窃取私钥。
网络安全公司 Crypto Deep Tech 在最近的一份报告中指出了使用中国制造的 ESP32 芯片的加密货币钱包存在风险,ESP32 芯片是一种广泛使用的微控制器,专为嵌入式系统和连接设备设计,该公司在最近的一份报告中指出了一个重大漏洞。
这些芯片通常部署在安全关键型环境中,并用于 Blockstream Jade 等硬件钱包以及 Bowser 和 Colibri 等开源项目中,它们通常充当敏感网络的网关或存储加密凭证,这使得漏洞尤其严重。
据研究人员称,攻击者可以利用该芯片的蓝牙和 Wi-Fi 连接注入恶意模块更新、获得低级访问权限并提取私钥等敏感钱包数据。
The chip suffers from multiple vulnerabilities, including a weak random number generator that makes Bitcoin private keys dangerously predictable, and broken validation checks that allow invalid or low-value keys to be used.
You might also like:Chrome extension compromise puts crypto wallets at risk, analysts warn
基于 Electrum 的钱包尤其容易受到攻击,因为该芯片存在缺陷的哈希逻辑允许攻击者利用非 BIP-137 消息格式并生成可验证为真实比特币交易的伪造 ECDSA 签名。
此漏洞尤其令加密货币用户担忧的是其隐秘的执行方式。在实际测试中,Crypto Deep Tech 的研究人员能够利用此漏洞绕过常规安全检查,恢复私钥,并在不引起用户任何警觉的情况下访问一个包含 10 BTC 的实时比特币钱包。
风险不仅仅局限于加密货币钱包。该漏洞为大规模供应链攻击、国家级间谍活动以及针对任何使用 ESP32 设备的网络的协同盗窃活动打开了大门。
为了减轻威胁,研究人员建议使用可信设备,保持比特币软件更新,并依靠安全的加密库来避免密钥盗窃和交易伪造等风险。
尽管被认为是经常被利用的软件钱包的安全替代品,但硬件钱包漏洞对于加密货币爱好者来说仍然是一个严重的问题。
Last month, Ledger Donjon researchers found that wallet maker Trezorâs latest Safe models still rely on a general-purpose microcontroller that is vulnerable to physical attacks.Â
Despite having a certified secure element for PIN and secret storage, the STM32-based chip used in Trezor devices could reportedly be exploited through voltage glitching, an attack that can be carried out purely in software and is nearly impossible to detect.
阅读更多:什么是加密钱包?2025 年终极钱包指南
Binance Coin has formed a golden cross as its decentralized exchange protocolsâ monthly volume surpassed a key milestone.
The Binance Coin (BNB) price was $660 on Sunday, up 13% from its lowest level this month. However, it remains a few points below this monthâs high of $692.Â
BNB price reacted to the ongoing demand of the BNB Smart Chain ecosystem. Data shows that DEX protocols on its network handled over $100 billion in the last 30 days.Â
This growth means that BSC has flipped top chains like Ethereum (ETH) and Solana (SOL), which handled $67 billion and $97 billion in the same period.Â
Most of BSCâs volume happened in the last seven days, when it jumped by 133% to over $55 billion. PancakeSwap is handling most of this volume as it continues to dominate the ecosystem. It handled $50 billion in the last seven days and $92 billion in the last 30 days. It also crossed the $1.62 billion cumulative volume mark.
You might also like:SYRUP price rallies as Maple TVL, staking market cap, whale purchases rise
Other top DEX networks on the BSC Chain, such as Uniswap, THENA, Dodo, and SquadSwap, have also seen higher volumes in the past few weeks.
The BSC Chain has had more activity after its last two protocol upgrades: Pascal and Lorentz. Pascal deepened its integration with Ethereum network, while Lorentz reduced its block time from 3 seconds to 1.5 seconds.
The next key catalyst will be the Maxwell upgrade, which will improve its speeds further and make it better than Ethereum and Solana. While the date has not been announced, the developers noted it will happen in June.
BNB price technical analysis
BNB price chart | Source: crypto.news
The daily chart shows that the BNB token bottomed at $510 in February and March. It neared that support level in April, forming a triple-bottom pattern with a neckline at $645.Â
BNB has now formed a golden cross pattern as the 50-day Weighted Moving Average has moved above the 200-day one. A golden cross often leads to more gains in the long term.Â
Therefore, more gains will be confirmed when the BNB price rises above the key resistance level at $690, its highest level this month. If this happens, it will increase the chances of it soaring to the next resistance level at $795, the highest point on Dec. 4 and 20% above the current level.
The long-term BNB price forecast is as bullish as crypto.news wrote here, citing the cup and handle pattern formation on the weekly chart.
Read more:Pepe price forms golden cross despite whale and smart money selling
Ethereum recently rejected from a key confluence zone, including the 0.618 Fibonacci level. With price back under the point of control, traders are watching closely for signs of a deeper move or a trap.Ethereumâs (ETH) price action has stalled at a technically significant region, the 0.618 Fibonacci retracement level, drawn from the most recent pivot high to low. This area is also reinforced by daily horizontal resistance and a descending VWAP, adding to its weight as a decision zone. After several failed attempts to push higher, ETH has now begun to roll over, trading back under the point of control (POC) of the local range.
Key technical points
Major Resistance Cluster:The 0.618 Fibonacci aligns with daily resistance and a descending VWAP, forming a strong technical ceiling.
Loss of POC:Price has fallen below the volume point of control, indicating sellers are gaining control of the short-term auction.
Bearish Structure Building:Lower highs and a stalled breakout raise the probability of a move toward the next key support near $1,540.
ETHUSDT Chart (4), Source: TradingView
Detailed analysis
After an impulsive move higher, Ethereumâs price has spent several sessions consolidating below a heavy resistance zone. The 0.618 Fibonacci level, a widely watched retracement marker, is reinforced by daily horizontal resistance and a declining VWAP drawn from the last major high. This confluence attracted notable selling pressure, and ETH has now failed multiple times to break above.What adds further caution to the current structure is the recent loss of the point of control within this region. Price has now dipped below the highest-volume node of the recent range, suggesting that the market is no longer accepting value at these levels. This often precedes range rotation or continuation in the direction of the rejection, in this case, to the downside.
You might also like:Bitcoin consolidates below key resistance as lower timeframe trend develops
The technical landscape also reveals a clear short-term bearish structure forming. ETH has been unable to print higher highs or maintain higher lows, increasing the probability of a broader correction. The next logical support level sits around $1,540, not only a structural level from previous sessions but also a zone with visible price inefficiencies (e.g., unfilled fair value gaps and single prints) that could act as magnets for price.This setup opens the door for a potential 10% downside move from current levels, especially if the recent swing low fails to hold. Still, traders should remain alert to the possibility of a fakeout, as Ethereum has previously shown sudden strength from similar rejection zones.
What to expect in the coming price action
Ethereumâs failure to break out above the 0.618 confluence zone and its rejection from the POC suggest a higher chance of rotation toward lower supports. If price breaks below the recent swing low, the $1,540 region could be the next target.
However, if buyers can defend current levels and reclaim the POC, this might prove to be a local fakeout before resuming upward. For now, caution is warranted as price hovers near a decisive level.
Read more:Camino partners with Lufthansa Systems and SWISS to drive innovation in the travel industry