推上有人总结的黑客 addresses 合集： 0x5d3919F12bCc35c26Eee5F8226A9bee90c257Ccc| 0xBb6A6006Eb71205e977eCeb19FCaD1C8d631C787 0x1F4C1c2e610f089D6914c4448E6F21Cb0db3adeF 0xeBA786C9517a4823A5cFD9c72e4E80BF8168129B 0xCBb24A6B4DAfaAA1a759A2F413eA0eB6AE1455CC 0x8d11AeAC74267DD5C56D371bf4AE1AFA174C2d49

Binance Alpha Listing(Doesn't mean official listing): Binance Alpha lists new tokens: AEON (AEON) Contract Address: 0x277add739c6e0477616948357af9e79fe1ec9b80 (BSC) Binance Alpha上新 (不代表会正式上市): 币安Alpha上线新代币： AEON (AEON) 合约地址：0x277add739c6e0477616948357af9e79fe1ec9b80 (BSC)

AggrNews: HYPERLIQUID POLICY CENTER AND MET WITH SEC'S CRYPTO TASK FORCE TO ADDRESS CRYPTO REGULATION: WEBSITE AggrNews: 超流动性政策中心 (HYPERLIQUID POLICY CENTER) 和 与美国证券交易委员会 (SEC) 的加密货币工作组会面，讨论加密货币监管问题：网站 HYPE MarketCap: 16.4B (Auto match could be wrong, 自动匹配可能不准确)

李强总理在第十七届夏季达沃斯论坛开幕式上的致辞 🔗 Address by Chinese Premier Li Qiang at the Opening Plenary of the Annual Meeting of the New Champions 2026 🔗

#笔记# OpenClaw 在clash fake-ip 模式下调用 Web Fetch 提示 Blocked: resolves to private/internal/special-use IP address 错误的解决方案： 在 openclaw.json 中添加 tools.web.fetch.ssrfPolicy.allowRfc2544BenchmarkRange 并设置为 true 即可。 参考：

#上海# 🏠硬5 （Miu）174-D #大长腿# #御姐# #大米#      上海miumiu 很白网球教练🎾🦜           𝐀𝐝𝐝𝐫𝐞𝐬𝐬:上海           𝐁𝐮𝐬𝐭🐻*大D           𝐇𝐞𝐢𝐠𝐡𝐭*174cm           𝐖𝐞𝐢𝐠𝐡𝐭*52kg 🐧：3893080991 ✈️： ✈️👗：

“珍珠是温柔的绳索，落在身上，成为一件秘密” Photographer📷:@Anli_028 Rope⛓️:@XKimYoung0403X Address🏠：@photismstudio @DnewHome  @tbzt2024 @fengsiyuan

正好拿今天及昨晚两个案例试了试并截图，一个是 Huma Protocol V1 被攻击： Huma Protocol on Polygon was drained for ~$101.39K. Root cause: refreshAccount(address) could move an unapproved credit line from Requested to GoodStanding. Primitive: approval-state bypass in credit lifecycle. _updateDueInfo() sets state = GoodStanding when no periods are missed, without preserving Requested. Profit: - 82,315.571143 native USDC - 19,074.730401 USDC.e Related wallet addresses: - Attacker EOA: 0x13b44e416e0f66359502e843af2e1191f1260daf - Attack borrower contract: 0x44d4a434ae1529106e4b801315e22721978022a3 - Helper: 0xef8a13797b009228f6e4a25112ea114b7ba6e1b2 Tx: - Attack: 0x7b8d641d76affcc029fd0e0f06ab81ad675b1da21ef79b82e1343016040ba359 - Setup requestCredit: 0x0adf9953c4e2506ffd4526ceee962a9bb61c573eaef60f669605cca68d0ef5aa - State refresh: 0x7126ae1d8e8d1e0c0f1c598de16a035cf309d6cc556e73edc2847de2b5777e5e 比较令我满意的是，Agent 自行找出了触发最终利用的一个前置条件 tx State refresh: 0x7126ae1d8e8d1e0c0f1c598de16a035cf309d6cc556e73edc2847de2b5777e5e 另一个是最近可能新起的钓鱼团伙，采用的是 permit 离线签名钓鱼技巧，这个分析其实很简单，如果 Agent 连这种单利用都识别失败，那只能说完全不及格了。 Mark 下，这些都是不错的实践。