protocol exploit · X 热门 · 2026-09-27 18:00 UTC

# protocol exploit — X 热门讨论 (2026-09-27 18:00 UTC)

## @normallitt (gangnormal) · 09-27 13:34 · ♥22 ↻0 💬20 một con số khá đáng nhớ:

CoinGecko thống kê 245 vụ exploit từ đầu 2025 tới tháng 7/2026.

khoảng 60% project bị exploit trước đó đã từng được audit bởi bên thứ ba.

không có nghĩa audit vô dụng.

vấn đề là audit smart contract không bảo vệ được mọi thứ.

private key bị lộ, nhân viên dính phishing, frontend bị hack, quyền admin có vấn đề... contract audit sạch vẫn có thể mất tiền như thường.

nên lúc check một protocol, tôi không còn thấy logo “Audited by xxx” rồi yên tâm nữa.

audit là một lớp bảo vệ.

không phải bảo hiểm chống hack. https://x.com/normallitt/status/2104202900314702082

## @Abdulkarim2 (De UniQue 👑) · 09-27 14:08 · ♥20 ↻5 💬6 🚨TOP 10 CRYPTO & WEB3 UPDATES FOR SEPTEMBER 27, 2026🚨

Today’s themes: BITCOIN ETF INFLOWS • BTC PRIVACY • AI AGENT PAYMENTS • TOKENIZED EQUITIES • NFT SECURITY • ETHGLOBAL TOKYO • BUILDER & CREATOR OPPORTUNITIES👇

1. ₿ BITCOIN ETFS FLIP POSITIVE FOR 2026 AFTER A $2.4B WEEK Institutional Bitcoin demand just delivered one of its strongest weeks in almost a year. U.S. spot Bitcoin ETFs attracted approximately $2.4 billion in net inflows last week their biggest weekly inflow since October 2025.

That turnaround is significant because the products were sitting around $5.8 billion in the red for 2026 as recently as mid July.

Now, year-to-date flows are back roughly $934M positive. 🔥 Bitcoin ETFs: +$2.4B weekly 🔥 Ether ETFs: +$689.9M weekly 🔥 Solana ETFs: record $86.7M Friday inflow

@BlackRock’s IBIT led Bitcoin products with roughly $1.2B for the week.

Source: https://t.co/4t0xA6Wp9W

2. 🛡️ RESEARCHERS PROPOSE “SHIELDED BITCOIN” FOR PRIVATE BTC PAYMENTS Bitcoin privacy could get an interesting new layer. Researchers at cryptography R&D firm [alloc] init have published a proposal called Shielded Bitcoin, inspired by Zcash’s privacy architecture.

The proposed system would use: 🔹 Zero-knowledge proofs 🔹 Encrypted transaction notes 🔹 Hidden transaction amounts 🔹 Hidden sender/receiver information

And importantly, the researchers say it could potentially work without changing Bitcoin’s consensus rules through a soft fork.

However, this is still early-stage research. There is currently no launch date, and major questions around deposits, withdrawals, fees and implementation still need to be solved.

Source: https://t.co/lbvRqRGrP5

3. ⚡ BLOCK BRINGS BITCOIN LIGHTNING TO x402 FOR AI AGENTS Bitcoin × AI payments are getting more interesting. Jack Dorsey’s Block has joined the x402 Foundation and added Bitcoin Lightning support to the open payment standard.

x402 is designed to allow AI agents and online services to automatically pay for APIs, data and digital services.

Lightning makes sense here because AI agents could need thousands of: ⚡ Tiny payments ⚡ Instant settlements ⚡ Low-cost transactions

Block joins companies including Google, Microsoft, AWS, Coinbase and the Solana Foundation around the x402 ecosystem. AI agents spending sats autonomously is moving closer to actual infrastructure.

Source: https://t.co/3hvqtIn9M2

4. 💵 @ethena_labs EXPANDS $USDe BACKING INTO TOKENIZED U.S. STOCKS Stablecoin infrastructure is crossing deeper into TradFi. @ethena_labs is expanding the strategy behind $USDe beyond crypto assets and into **tokenized U.S. equities.

The structure uses Binance bStocks as tokenized spot assets while taking corresponding short positions in equity perpetual futures to hedge market exposure.

Binance reportedly has more than $2.9B in equity perpetual open interest.

Ethena founder Guy Young described the move as one of the biggest expansions of USDe’s funding model since launch.

Tokenized stocks are no longer just something people trade they’re starting to become infrastructure inside crypto-native financial products.

Source: https://t.co/VuMxn1DMhn

5. 🚨 @MagicEden USERS WARNED OVER OLD NFT APPROVAL EXPLOIT A security lesson for anyone who has interacted with NFT marketplaces. @MagicEden revealed that old approvals from its discontinued EVM marketplace exposed more than $5.7M worth of NFTs to an exploit affecting Limit Break’s Payment Processor V2.

The good news: A whitehat rescue operation reportedly secured 23,155 NFTs worth over $5.7M.

But approximately 660 WETH was also exposed through a related vulnerability and could not all be recovered in time.

Magic Eden says no current live listings were affected. Users who interacted with the old marketplace during the affected period have been advised to revoke the vulnerable approvals across Ethereum, Polygon and Base.

Another reminder: Closing a dApp doesn’t automatically remove the permissions you previously gave its smart contracts.

Source: https://t.co/kkCQ67FFlj

6. 🧑‍💻 @ETHGlobal TOKYO 2026 REACHES ITS FINAL DAY Builders in Tokyo are wrapping up three days of shipping. @ETHGlobal Tokyo 2026 runs through today, September 27, with teams moving through project submissions, judging, finalist selection and closing ceremonies.

The event brought Ethereum builders together across areas including: 🔹 DeFi 🔹 AI × Crypto 🔹 Identity 🔹 Privacy 🔹 Infrastructure 🔹 Consumer applications

ETHGlobal’s schedule includes Top 10 team notifications, closing ceremonies and the hackathon finale today.

For builders outside Tokyo, the projects coming out of this event are worth watching hackathons often reveal ideas months before they become broader narratives.

Details: https://t.co/GMFIMc6Q5v

7. 🔥 OPPORTUNITY: EXPLAIN THE solana:STREAMribRwybYpMmSYoCsQUdr6MZNXEqHgm7p1gu9M BURN $500 USDC Creators, here’s a fresh one. Streamflow Finance is offering $500 USDC through @SuperteamEarn for original X content explaining the recent **$STREAM token burn.

The core story: 🔥 Streamflow Foundation burned 100% of the STREAM it held 🔥 That represented 70% of the original total supply 🔥 No mint authority exists 🔥 Supply is now permanently capped at 300M STREAM

Prize pool: 🏆 5 winners 💰 $100 USDC each

You can submit an X post, thread or video Apply: https://t.co/mA1Xj5BI8m

8. 🤖 OPPORTUNITY: BUILD AN AI AGENT & WIN $500 USDC AI × Solana builders, this one is worth checking. OOBE Protocol is running the Steve Agent Arena through @SuperteamEarn.

The idea: Build your own onchain AI agent, give it its own Solana wallet and let it interact with 400+ available tools: 🔹 Trading 🔹 Swaps 🔹 Payments 🔹 Market data 🔹 Risk management 🔹 Automation

Then earn XP and compete on the leaderboard.

Prize pool: 🥇 $250 USDC 🥈 $150 USDC 🥉 $100 USDC

Global opportunity.

Apply: https://t.co/DcdsnHKsyT

9. 🏗️ OPPORTUNITY: SOLANA CRYPTO WORLD’S FAIR TRACK $10,000 USDG

Builders, this remains one of the stronger active opportunities.

The SolanaCZE Crypto World’s Fair Hackathon Track has $10,000 USDG from the main Colosseum prize pool.

Rewards: 🥇 $4,000 🥈 $2,500 🥉 $1,500 4th: $750 5th: $250 🎁 Two additional $500 bonuses

Skills include: • Blockchain • Frontend • Backend • Design • Growth • Content

The global Colosseum submission deadline is October 12.

Apply: https://t.co/pOeGbKG1Fz

10. 🎥 OPPORTUNITY: @Nectar_finance × DOMINION $1,000 USDG FOR CREATORS This one remains particularly relevant for Nigerian and African Web3 creators.

@Nectar_finance and Dominion Market are running a $1,000 USDG creator bounty through @SuperteamEarn.

Creators need to produce video content that: 🔹 Introduces solana:SiLVFMgD3eD2rgK628NbTBq9MnuJF5FW2CRaVyTB35L 🔹 Explains its use case 🔹 Shows how to buy on NectarFi 🔹 Explains the related reward campaign

Prize pool: 🥇 $500 USDG 🥈 $300 USDG 🥉 $200 USDG

The brief specifically says content should be easy to understand and suitable for Nigerian and African audiences.

Apply: https://t.co/LzApJ3k4uJ

⚠️ Disclaimer: This post is for educational and informational purposes only and is not financial or investment advice. Crypto and Web3 opportunities involve risk. Always verify official links, eligibility and deadlines before participating, and do your own research. https://x.com/Abdulkarim2/status/2104211478727237837

## @0xGwoni (Gwoni | Hedgers🦔) · 09-27 08:26 · ♥22 ↻2 💬2 [@tori_finance , @AxisFDN] 최근 Tori 와 Axis 이슈 정리 ────────────────── 1. Tori

Tori는 이전 포스트에 작성 했듯, 튀르키예 화폐인 리라, 그리고 달러 사이의 금리 차를 이용한 캐리 트레이딩이 수익의 원천인데

https://t.co/HTyiUOcuRS 최근 튀르키예에서 운용 자산 순위로는 최상위 기업들인 Tera Portföy , Pusula Portföy 등 7개 운용사에서 환매 불가 기사가 뜨기 시작 했고, 강제 청산이 예정 되어 있다고 전달 되기 시작합니다. 강제 청산이 예정 된 포트폴리오의 규모는 ($21.4B) 210억 달러의 규모 였습니다.

16일 BIST-100 인덱스가 급락 하는 등, 튀르키예 시장에 영향이 번지는 듯 싶다가 튀르키예 정부가 다음날 빠르게 개입하여, 자본 청산 개입 및 중앙 은행의 repo를 이용해 위기가 번지지 않도록 개입 했고, 지금은 시장이 반등 하는 등, 안정화 되는 모양새입니다.

Tori도 영향을 받지 않을까 걱정했고, 만약 자산 환매라도 딜레이 되지 않을까 싶었지만 별 다른 이슈 없이 익스포저가 없었는지, 아래 포스트와 함께 https://t.co/K29J6Tjexh 별 이슈 없이 잘 지나가는 듯 싶습니다.

https://t.co/3h2m07RI5k 같은 전략을 운용하는 @PikuFinance 에서도, 해당 이슈가 발생한 시기쯤, TVL의 3-40%에 해당하는 $10M 규모의 자금이 딜레이 없이 인출 되는걸 보고 두 곳 다 다행히 별 문제 없구나 하고 한숨 돌렸습니다. ────────────────── 2. Axis

Axis는 아시다시피, 여러 CEX에 자산이 예치 되어 있고, 각 CEX마다의 가격 불균형, 아비트라지를 통한 수익이 수익의 원천 이였습니다.

다만 엊그제 Bitget Exploit이 발생 했고, Axis팀의 자산이 Transparency에 정확히 어느 CEX인지 표기되어 있진 않지만, Market Access에도 Bitget이 표기되어 있는걸 보면 Bitget에 자산이 Exposure 되어 있으리라 예상합니다.

Accountable을 확인해보면, 최대 12% ~ 6% 정도까지 Bitget에 Exposure 되어 있지 않을까 싶은데 그래도 다행히 Bitget이 거래소 자체의 복구 기금을 이용해 이용자들의 자금은 피해가 없도록 보장 했기 때문에, Axis에서도 손실은 없을거라 생각 합니다. ────────────────── 3. 번외

사실 온체인에서의 Exploit이 CEX Exploit보다 훨씬 빈번하고, Exploit이 발생하더라도, 상위 랭크 CEX들의 경우엔 대부분 자체 자금을 통해 리커버리 하는 편이 많기 때문에 Axis의 전략을 선호 하는 편입니다. 다만 Axis 전략이 Off-Chain 에서 운용 되는지라, 유동성 공급자 입장에선 팀을 무작정 신뢰 해야 한다는 패널티(?)가 있지만요.

Tori도 Off-Chain 이지만, 국가간 캐리 트레이딩이라 각 국가별 Legal 리스크, 혹은 지정학적 리스크, 국가 금융 위기등이 대응할 수 없는 리스크로 올라올 수 있고, Axis도 온체인 보다는 현저히 낮지만, CEX도 Exploit이 발생할 수 있다는 점.

https://t.co/6RMxEGirWW 혹은 과거 OKX(OKEx)처럼, 파운더들 이슈로 출금이 강제 제한 된다거나 하는 특정 이슈가 발생할 수 있다는 점 등이 있을거 같아요.

물론, 위 모든걸 감안하더라도 하루가 멀다하고 발생하고 있는 Onchain Exploit 보다는 현저히 확률이 낮겠지만요. Tori, Axis도 Onchain Protocol 이지만, 극단적으로 가정해서, 그들의 달러 증명 토큰을 무한정 민팅하고 Dex에 던지더라도, Dex에 배치된 USDT/USDC 유동성만큼만 빨려 나가지, 그 이상은 피해가 발생 할 수 없으니 나름의 쿠션이라고 생각합니다. 직접 리딤 요청한다고 바로 리딤 되는것도 아니고요..😊

꽤 오랜 기간 Axis와 Tori 모두 자금이 배치되어 있던 입장에서, 최근 1-2주 동안은 별 일 없겠지하며 걱정했던 시간이였습니다. 직접적으로 Exploit 난게 아니라서, 다행히 모두 크게 걱정은 안했지만요.

이제 추석 연휴도 마무리 되고, KBW 주간 이네요. 과연 이번 KBW에는 어떤 이슈가 있을지. 😉 > 引用 @tori_finance: Tori is not affected in any way by the fund wind-downs, forced selling and volatility in local markets. All operations are running as normal.

Reserves and custody balances are independently verified in real time. https://t.co/xM0gw6vUmp https://t.co/urIQPViLlG https://x.com/0xGwoni/status/2104125415891845468