XRP Ledger已激活修复，阻止获授权销毁者增发代币
XRP Ledger于北京时间11月4日22:52激活fixCleanup3_4_0，修复了有限销毁权限账户在特定条件下可创建新代币的问题。报道指该漏洞不影响XRP本身，暂无公开确认的利用案例。
Loading…
bibibi.ccbibibi.ccLoading…
Connect scattered updates into a story you can understand.
XRP Ledger于北京时间11月4日22:52激活fixCleanup3_4_0，修复了有限销毁权限账户在特定条件下可创建新代币的问题。报道指该漏洞不影响XRP本身，暂无公开确认的利用案例。
BTCPay Server称，2.4.1及更早版本漏洞遭利用，部分比特币和莱特币热钱包资金被盗；官方建议受影响用户迁移至全新环境和钱包。
Initia stated that, in response to the security vulnerability discovered by October 23, the remediation plan has been drafted and entered a security audit. Upon completion of the audit, it will announce a plan to restore asset backing and restart the networks in an orderly manner.
Initia said the attacker exploited a MoveVM script caching vulnerability to bypass checks and forge status, transferring out approximately 2700000 USD in assets before the network was paused, later exchanging them for 1135.52 units ETH。
Initia Co-founder Zon said the security incident may have originated from MoveVM's Day 0 vulnerability; attackers transferred out approximately 2700000 USD AUSD、ETH and USDC. The team is still investigating, and INIT is reportedly unaffected.
Binance stated that, following disclosure of the PHP security vulnerability, it proactively implemented protective measures and completed necessary remediation before the official patch was released, and will continue monitoring related developments.
Pirate Chain stated that it had rolled back to block 4,176,944, removing approximately 39820000 counterfeit ARRR tokens, and requiring nodes, mining pools, and exchanges to upgrade immediately to v6.0.14。
Lightning Labs CTO Olaoluwa Osuntokun stated that CVE-2026-111943 involves a compromised certificate authority and recommended that lnd, btcd, tapd, and litd users update their clients or rebuild with Go 1.27.3.
PHP Foundation stated that 2024 fixes for critical security vulnerabilities first discovered in the year were repeatedly halted due to hesitant decision-making and insufficient resources.PHP has released emergency patches for related critical vulnerabilities, while some government websites and online services were temporarily taken offline to deploy the patches.
Google stated that Google Cloud itself has no vulnerabilities, but users running PHP on its platform may be at risk; it is updating the supported PHP version's serverless base image and urges customers to upgrade to PHP 8.2 or later and redeploy.
PANews reported that October 21 the Netherlands NCSC official website was temporarily inaccessible, while websites including those of the Dutch House of Representatives, the Finnish government, and the French CNIL experienced outages or shutdowns, and pixiv and Niconico entered emergency maintenance.
SlowMist says that PHP disclosed CVSS v4.0-rated 9.2 vulnerabilities that could lead to remote code execution. The official security update is expected to be released on October 21 at 14: 00 UTC. The affected scope and exploitation conditions have not yet been officially confirmed.