ckcsec retweeted
我们正在全力推进问题解决,币安将承担因此产生的全部损失。
作为预防性安全措施,在团队开展安全检查、冻结相关资金并与执法部门协作期间,所有充值和提现功能暂停。
我们的团队正全天候推进相关工作,并将在调查完成后发布完整的事件复盘报告。请以币安官方渠道发布的信息为准。
此次事件的应对离不开行业各方的共同努力。我们感谢生态系统中各合作伙伴的积极响应,并迅速协助冻结受影响资产。
我们将继续通过币安官方渠道同步经核实的最新进展。请放心,用户资金是安全的。
ckcsec retweeted
See you in HK! 🇭🇰
We are pleased to welcome Justin Sun, Founder of TRON to the Hong Kong Digital Asset Summit.
Justin’s work as TRON’s founder spans the blockchain networks underpinning digital asset activity.
The summit will explore how digital asset services operate in practice, bringing financial institutions, public-sector participants and blockchain infrastructure providers into the same conversation. Payments, settlement, market access and operational requirements are central to that discussion.
November 5-6, 2026 | Grand Hyatt Hong Kong
Explore the summit: cosmoverse.org/summits/cosmo…
@justinsuntron @trondao
Replying to @CoinDCX
CoinDCX deposit address TQKJQ was in use by a LP for 10 months after your July 2025 incident and swept user deposits + received gas as recent as April & May 2026 to your current public hot wallet.
Meaning $15.8M in user deposits was unaccounted for by your team.
Why are Indian CEXs so untrustworthy?
WazirX
BitBNS
Now CoinDCX
ckcsec retweeted
《致胡锡进老师》
胡锡进老师:
您第二篇文章的最后一句是,做人还是要老实、厚道一些。我想老实地向您请教一件事。
我是一九九零年生人,今年三十六岁,到了婚育的年纪。您是长辈,比我大整三十岁,我读北大的时候就读您的文章,所以这件事我想问您,不想问别人。
全中国二十岁到四十岁的男性有两亿,女性也有两亿。她们那一边的代价,不该由我来说,我只说我这一边。
怎么和女性相处,怎么组成家庭,怎么生儿育女,这条路我们没有走过,没有人教过我们,我们不懂。旁人看这些是吃瓜,对这两亿人,这是每天早上醒来就要面对的事。
我不知道,一个中国男人是否应当支付高额的彩礼;如果应当,是按定额,还是按他财产的比例。
我不知道,生育这件事,男方应当为它付出多少代价。
我不知道,婚前婚后女方提出的要求,男方是否都应当满足;如果没有满足、女方离开,男方是否有权取回彩礼;女方拒绝,男方是否可以走法律途径。
我也不知道,一个男人礼数尽了,父母见了,分手很久,钱要不回来,人也找不到之后,是否有权向公众说出自己的看法。我选了说。这对不对?
这些问题,我没有答案。有些问题,国家有它的答案,一号文件写了,最高法也出了解释,我读过,也信;但文件写在纸上,彩礼谈在饭桌上,中间隔着现实的规矩。您是长辈,您的答案,我也尊重,就像我对法院最终的彩礼判决无条件尊重一样。
彩礼总归是要付的。天南地北,白丁鸿儒,无非是三万、三十万、三百万、三千万的分别。这是两亿青年男性都要承受的代价,我们认。
一个人算不清一笔账的时候,最稳妥的做法是不算。我出生的一九九零年,全国出生了两千三百多万人;去年,七百九十二万,建国以来最少。
我不认为这全是一笔账的缘故,但少的那三分之二里,很多人不是不想,是不知道这条路上要付什么、付多少、付了之后算不算数。人不会因为代价高而退出,退出,是因为看不见代价的边在哪里。
这个代价的规则究竟是什么,我们不知道。
两亿人在等这个答案,因为这是他们成家的第一步,也将决定未来三十年这个国家由谁组成。
我今天没有答案。我希望三十年后,有年轻人来问我这个问题的时候,我能给他一个。
孙宇晨
ckcsec retweeted
Cursor is now part of @SpaceX.
Today, we have officially closed our acquisition. We will join the @spacexai team to help make Grok the world's most useful AI and improve Grok Build, Grok Bot, Grok API, Cursor, and more.
SpaceX has built some of the most inspiring and impressive technology in the world, and we’re grateful for the opportunity to become part of such a special company. Onwards.
Interesting.
Grok 4.6 releases around August 7. This will be the 1.5T model with significantly improved SFT & RL.
Grok 4.7 will be the 2.1T model released a few weeks later. This will be better than 4.6 in every way, except slightly slower to serve, albeit with even better token efficiency.
In our latest deepsec.sh benchmarks, Grok 4.5 has emerged as the best cybersecurity AI model on price-performance.
It's 10x cheaper than Sol, 5.7x cheaper than Opus 5, and 2.2x cheaper than Kimi K3, yet at Kimi-like perf.
Sol remains the frontier, ahead of Opus 5.
ckcsec retweeted
For my first post, I’m sharing a letter @NVIDIA signed on why open models matter.
AI will transform every industry, power every company, and be built by every country.
Open models strengthen safety and cybersecurity, accelerate innovation and diffusion, and enable sovereignty.
The world needs both frontier closed models and frontier open models.
images.nvidia.com/pdf/Open-W…
ckcsec retweeted
RCE PoC - CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution (ASLR on). github.com/dinosn/CVE-2026-2…
ckcsec retweeted
Original write-up on the fastjson 1.2.83 gadget-free RCE.
Have fun reading, I hope you missed writeups without AI slop.
Comment here your opinion.
fearsoff.org/research/fastjs…
ckcsec retweeted
Chinese version fearsoff.org/cn/research/fas…
ckcsec retweeted
A scanner and Docker lab + one-payload exploit for the fastjson 1.2.66-1.2.83 @jsontype remote-class-load RCE github.com/dinosn/fastjson-j…
ckcsec retweeted
We found a gadget-free RCE in Fastjson 1.2.83 - the final release of the 1.x line, and still one of the most widely-deployed Java JSON libraries in production today, even with 2.x around.
No classpath gadget. One payload-> RCE.
Once we have completed our review for security vulnerabilities, we will make the entire codebase of 𝕏 open source, with no exceptions.
Moreover, we will invite third party reviewers to examine the system that is running to confirm that the open source code is what is running.
Trust through total transparency is the only thing that should be believed.
Introducing ChatGPT Work, a new agent in ChatGPT powered by Codex and GPT-5.6.
It can take action across your apps and files, stay with a project for hours if needed, and turn a goal into finished work.
It’s a whole new way to get work done.
ckcsec retweeted
Our team's open-source project HaE (Highlighter And Extractor), meticulously crafted and refined over eight years of continuous iteration, has been honored with the Most Nominated Award at the Burp Extensibility Awards 2026(portswigger.net/blog/burp-ex…).Thanks to the @Burp_Suite @BApp_Store team for all their efforts!
"Highlighter And Extractor acts like a smart filter, immediately drawing my eyes to the requests that matter most. It feels like having an extra pair of eyes watching the traffic for me. The rule-based automation - the ability to write custom regex rules and have Burp automatically highlight and extract data - is a game-changer."
github.com/gh0stkey/HaE
ckcsec retweeted
由于不可抗力因素,币安钱包SPCXx IPO Campaign 将无法继续进行。
🔸 所有参与用户的 USDC 已完成全额退款至您的币安钱包地址
🔸 所有参与用户将均分价值 $1,000,000 的 bStocks SpaceX 代币(SPCXB)空投,并自动发放至您的币安现货账户
🔸 无需等待——现可在币安提交 SpaceX(SPCX)股票的整股正常交易时段限价订单
感谢您的耐心与支持,详情请查看公告👇
binance.com/zh-CN/support/an…





























