Portal narxPORTAL

Ethereum Layer 2 platform, Abstract, has released an initial post-mortem on a security incident that resulted in the compromise of approximately $400,000 worth of ETH across 9,000 wallets interacting with Cardex, a blockchain-based game on its network. The report clarified that the breach stemmed from vulnerabilities in Cardex’s frontend code rather than an issue with Abstract’s core infrastructure or session key validation contracts. Cardex Wallet Compromise The incident revolved around the misuse of session keys, a mechanism in the Abstract Global Wallet (AGW) that allows for temporary, scoped permissions to improve user experience. While session keys themselves are a well-audited security feature, Cardex made a critical error by using a shared session signer wallet for all users, a practice that is not recommended. This flaw was further amplified by the exposure of the session signer’s private key to Cardex’s frontend code, which ultimately led to the exploit. According to Abstract’s root cause analysis, attackers identified an open session from a victim, initiated a buyShares transaction on their behalf, and then used the compromised session key to transfer the shares to themselves before selling them on the Cardex bonding curve to extract ETH. Importantly, only the ETH used within Cardex was affected. Meanwhile, users’ ERC-20 tokens and NFTs remained secure due to session key permissions limitations. The timeline of events indicates that the first signs of suspicious activity were flagged at 6:07 AM EST on February 18th when a developer posted a transaction link showing an address draining funds. In less than 30 minutes, Cardex was suspected as the source of the exploit, and security teams quickly mobilized to investigate. Within hours, mitigation steps were taken. This included blocking access to Cardex, deploying a session revocation site, as well as upgrading the affected contract to prevent further transactions. Abstract has outlined several measures to prevent future incidents of this nature. Going forward, all applications listed in its portal must undergo a stricter security review, including front-end code audits to prevent the exposure of sensitive keys. Additionally, session key usage across listed apps will be reassessed to ensure proper scoping and storage practices. Documentation on session key implementation will be updated to reinforce best practices. What’s Ahead In response to this breach, Abstract is also integrating Blockaid’s transaction simulation tools into AGW, which will help users to see what permissions they are granting when creating session keys. Further collaborations with Privy and Blockaid are underway to improve session key security. A session key dashboard will also be introduced in The Portal, which is expected to give users a centralized interface to review and revoke their open sessions. The post Ethereum Layer 2 Platform Abstract Reports $400K Crypto Breach in Cardex Incident appeared first on CryptoPotato.

The post Hashdex Receives Approval for World’s First XRP Spot ETF in Brazil appeared first on Coinpedia Fintech News In a recent development, Hashdex has received approval from the Brazilian Securities and Exchange Commission to launch the world’s first XRP spot ETF. The HASHDEX NASDAQ XRP INDEX FUND is in its pre-launch phase, marking an important milestone for both the cryptocurrency market and Brazil’s financial sector, according to Portal do Bitcoin. The listing date on the Brazilian stock exchange B3 is yet to be announced. The fund will be administered by Genial Investimentos, though further details are yet to be disclosed.

Governance is a crucial aspect of decentralized blockchain ecosystems, allowing users to influence key decisions regarding protocol upgrades, economic policies, and ecosystem changes. While $BERA itself is primarily a utility token, it can be converted into Berachain Governance Token (BGT), which grants holders voting rights in the Berachain DAO (Decentralized Autonomous Organization). How Governance Participation Works 🔄 Converting $BERA to BGT 🔄🔑 Users stake or lock their $BERA to receive BGT (Berachain Governance Token). BGT represents a user's voting power within the Berachain ecosystem. The more BGT a user holds, the greater their influence over governance proposals. Proposal Submission 📝🚀 Anyone holding BGT can submit proposals regarding: Protocol upgrades (e.g., improving network scalability). Economic changes (e.g., adjusting staking rewards or transaction fees). New feature implementations (e.g., integrating new DeFi protocols). Community initiatives (e.g., developer grants, marketing strategies). Proposals are reviewed by the Berachain community, ensuring a decentralized decision-making process. Voting Process 🗳️📊 Once a proposal is submitted, BGT holders vote for or against the changes. Voting can take place on Berachain’s governance portal, a DAO platform, or other blockchain-based voting mechanisms. Proposals with majority support are executed and implemented into the ecosystem. Governance Rewards 🎁💰 Active participants in governance may receive incentives such as: Voting rewards in $BERA for participation. Special privileges in the ecosystem (e.g., early access to new DeFi features). Recognition in the community as key decision-makers. Why Governance Participation is Important? 🏆 ✅ Empowers the Community – Users shape the development of Berachain. ✅ Ensures Decentralization – Decisions are not controlled by a single entity. ✅ Improves Ecosystem Sustainability – The network evolves based on community needs. ✅ Encourages Long-Term Holding – Staking $BERA for BGT aligns incentives with network success. By participating in Berachain governance, users directly impact the blockchain’s future, making it a truly decentralized and community-driven ecosystem. 🌍🚀

Apex Legends recently launched Season 24, introducing a host of new content, such as the Arsenal feature. The new updates included buffs and specific enhancements for Assualt Legends, as well as new weapon skins. The launch was followed up by an update that fixed the shooter game’s major bugs. Apex Legends has remained an industry leader in battle royale shooter games since its launch in 2019. With the game dipping in players, Respawn Entertainment, its developer, has released new content to help keep gamers engaged. Respawn Entertainment rolls out Apex Legends Season 24 We got to playtest Apex Legends Season 24. There are some HUGE changes!!! Gun Arsenals – Added to Every POI– You can pull guns and ammo out of arsenals to quickly get looted up (they will randomly be one ammo type). You can also get 1 gun buff at the arsenals. Combat… pic.twitter.com/nCeIUwAOUu — HisandHersLive (@HisandHersLive) February 5, 2025 Respawn Entertainment launched Apex Legends Season 24 on February 11th, 2025. The new season came with major changes in balancing and the game’s class-specific upgrades. The new season introduces Arsenals to the game. The Arsenals are located at every POI, and the ammo type contained is randomized for each match. Each arsenal will have a white or blue upgrade of attachments. Gamers will be able to see the name of the POI in the sky with the names of the ammo type of the Arsenal in that POI. Matchmaking will also be improved using skill balancing to place gamers of similar levels against each other. Season 24 also changes how combat and gear, such as armor and helmets, work. The new season will have armor being capped to purple (Level 3). However, gamers can access red(level four) shields with the new mythic red helmet from mythic bins and late-game care packages. The game also introduced damage buffs to all guns. Additionally, Assualt Legends also get buffs that include “Auto Reload” of weapons stowed for over 2 seconds, 2 extra grenade slots, and 3-second movement buffs after cracking a shield. The game also introduced new skins for mythic weapons, such as the Mythic Wraith 301. Season 24 also features other major buffs for individual Apex Legends, especially Ash and Ballistic. Ash now has the Predator’s Pursuit passive, which grants her an omnidirectional short-range dash and boosts her mobility. Ash also has an extended Ultimate Portal distance and the ability to store two ultimate charges at blue armor. On the other hand, Ballistic can now use up to four Whistlers. Ballistic can also sling holster crate weapons that gain infinite ammo when his ultimate is active, maximizing his improved ultimate mechanics. Respawn launches follow-up update as gamers lodge more complaints Following the launch of Season 24, gamers online voiced their complaints over several bugs and issues affecting the gamer’s ability to play the game. Respawn quickly responded to the complaints while also providing a workaround fix to the EA crash issue. They announced that the EA App crash issue had been fixed a few hours after the studio had acknowledged the issue. The company also clarified that badges were earnable in the Mythic Mayhem Royale mode and that Redemption Trios & Duos had been removed from takeover and were to be added as an LTM later in the season. Respawn announced that it had fixed most of the major bugs pointed out by gamers after season 24 launched. The new update contained fixes for tracking the Bangalore Smoke Launcher Challenge. The challenge required players to hit five enemies with the tactical ability and had been logged as incomplete for some players who had completed the challenge. Additionally, a bug affecting the R-301 event badge was resolved. The R-301 bug had been failing to track damage dealt with the weapon, leaving many players stuck at zero progress regardless of their in-game performance. The final patch also included fixes related to the Fast Charge Gold Helmet. The Helmet had mistakenly appeared in the game’s Battle Royale mode instead of its intended game mode. As a result, the item’s appearance disrupted the game’s balance in battle royales, an aspect that many gamers complained about. The fix returned the helmet to its rightful mode and restored competitive integrity in Battle Royale mode. Cryptopolitan Academy: Are You Making These Web3 Resume Mistakes? - Find Out Here

s the opportunity to earn ANLOG tokens through various community activities and contributions . The airdrop rewards are tied to user participation in multiple activities, including completing testnet quests, participating in the Watch Game voting sessions, and engaging with the community. To participate in the airdrop, users must complete the Proof of Humanity verification and connect their Substrate wallets to the Testnet Dashboard . The claim process is active, and eligible users can claim their ANLOG tokens through the official claims portal. Analog has also partnered with Rarible to streamline cross-chain NFT interoperability, enabling true cross-chain interoperability . This partnership is a significant [13/02, 11:17 pm] Business assistant: Here's another article on the topic of Analog and its token, ANLOG. Analog has launched Phase 2 of its incentivized testnet program, offering participants the opportunity to earn ANLOG tokens through various community activities and contributions . The airdrop rewards are tied to user participation in multiple activities, including completing testnet quests, participating in the Watch Game voting sessions, and engaging with the community. To participate in the airdrop, users must complete the Proof of Humanity verification and connect their Substrate wallets to the Testnet Dashboard ¹. The claim process is active, and eligible users can claim their ANLOG tokens through the official claims portal. Analog has also partnered with Rarible to streamline cross-chain NFT interoperability, enabling true cross-chain interoperability ². This partnership is a significant step towards breaking down the barriers between different blockchain networks. Additionally, Analog has launched a fourth batch of its incentivized testnet program, allowing more users to participate and earn ANLOG tokens . The claim period for the airdrop is six months, and unclaimed rewards will revert to the Analog Ecosystem Fund after this period. For more information on Analog and its token, ANLOG, you can visit their official website or subscribe to their newsletter $ANLOG