hub

Police officer Guo Tingyu from the Cybersecurity Division of the Qingshan Branch of the Wuhan Public Security Bureau participated in the investigation of Hubei's first virtual currency theft case. By tracking the flow of funds and analyzing the code of fake wallets, he identified and dismantled a cryptocurrency theft gang involved in over 100 million yuan in illicit funds, with all five suspects arrested.The gang induced users to download a counterfeit virtual currency wallet app to steal coins, with a total download count of over ten thousand. Guo Tingyu also participated in the investigation of multiple virtual currency-related criminal cases.

According to market news, the adult website Pornhub has stopped using Tether (USDT) for creator revenue settlements and has switched to USDC issued by Circle.In an email sent to creators, Pornhub stated that this switch aims to make revenue payments "more reliable" and emphasized that USDC is a fully reserved, compliant stablecoin that meets the EU MiCA regulatory framework. Pornhub previously introduced USDT in 2020 after PayPal announced the termination of its partnership with the platform, and it built its payment infrastructure with the help of the TronLink wallet owned by Sun Yuchen. After this switch, the aforementioned partnership has also been removed from its creator page.

The Financial Secretary of Hong Kong, Paul Chan, delivered the opening speech at the 2026 Hong Kong Web3 Carnival, stating, "The rise of AI agents this year is another noteworthy milestone. The intersection of AI and technologies like Web3 is changing the game. The combination of the two will elevate transaction efficiency to a new level and cover a broader range of business areas, from finance and trade to wealth management, supply chain operations, and logistics. This combination will create a multitude of new opportunities but will also pose a series of challenges, such as issues related to infrastructure payment and settlement systems and regulatory rules.Hong Kong's policy on Web3 and AI has always been clear, maintaining consistency under the principle of 'one country, two systems.' As an international financial center, Hong Kong embraces innovation, with stablecoins, tokenization, and AI becoming important components of the mainstream future. Hong Kong's regulators have a dual mission of prudent regulation and promoting market development, which requires us to encourage and support more innovative applications, improving our institutional framework based on continuous experience. I firmly believe that Hong Kong will undoubtedly become a key hub for the thriving development, widespread application, and responsible scaling of the new generation of technologies."

According to the official announcement, OpenClaw's AI agent Skills library platform ClawHub has officially launched a mirror site in China, with the domain mirror-cn.clawhub.com. This infrastructure is sponsored and supported by BytePlus, a subsidiary of ByteDance.

According to the official announcement, Bitget has upgraded its Agent Hub with the addition of 5 analytical AI Skills and 19 data integration tools. This upgrade aims to integrate market analysis and trade execution into a unified system, with new features covering macro analysis, technical signal detection, sentiment monitoring, market intelligence, and cross-market news aggregation.Following the launch of the Agent Hub infrastructure and standardized interface in February this year, Bitget's update aims to address the information processing challenges faced by traders when confronted with multiple complex signals such as macroeconomic data, on-chain activities, and real-time capital flows. The upgraded Agent Hub can continuously process market inputs and convert them into structured strategies directly under the unified account structure of Bitget UEX, further advancing AI from an independent auxiliary tool to the foundational infrastructure for trading operations.

Tencent's PR Director Zhang Jun stated today that on March 30, the WeChat Work CLI open-source project was launched on the GitHub community, opening up seven core product capabilities including messaging, scheduling, documents, smart forms, meetings, to-do lists, and contacts, supporting mainstream AIAgents (such as ClaudeCode, Codex, WorkBuddy, QClaw, etc.) for invocation.Developers can leverage these capabilities to enable AIAgents to understand and utilize WeChat Work's features in a more natural way, quickly developing AI applications that are more aligned with everyday office scenarios.

According to a security alert released by GoPlus Security, Silverfort security researchers discovered a serious vulnerability in OpenClaw's skill repository ClawHub. Attackers can bypass all protective mechanisms by calling the internal function downloads:increment, allowing them to inflate the download count to over 20,000 in just a few minutes with a single curl request, thereby pushing malicious skills to the top of search rankings and enticing users or AI Agents to install them automatically.Once the malicious skill is running, it can steal sensitive data such as cryptocurrency wallets and API keys. The vulnerability has been patched within 24 hours. GoPlus advises users that a high download count does not equal safety and recommends using AgentGuard for security scanning and protection.

Gate announces the completion of a comprehensive upgrade to Skills Hub, expanding the number of AI skills from 11 to over 10,000, creating the most comprehensive AI trading strategy market in the industry. The platform aggregates resources from multiple sources, including GitHub, and optimizes the supply structure through deduplication and quality screening mechanisms, covering core scenarios such as market analysis, arbitrage strategies, trade execution, and risk management.In terms of user experience, Skills Hub introduces an 8-category system and a tagged filtering mechanism, combined with multi-dimensional search and intelligent sorting capabilities, to help users quickly locate target strategies. At the same time, the platform offers a dual-mode installation path: ordinary users can generate commands with one click, allowing AI to automatically load and execute, while developers can deploy and conduct secondary development through standard methods.Additionally, Skills Hub supports the use of various capability combinations, covering the complete process from market analysis to trade execution, enhancing the practical application of AI in trading. As a core module of Gate for AI, this upgrade further improves its capability layer construction, promoting the development of AI trading from single-point functions to systematic applications.

According to market news, the security platform OX Security has disclosed that the developers of the AI agent project OpenClaw are becoming targets of cryptocurrency phishing activities.Attackers create fake GitHub accounts, initiate topics in repositories controlled by them, and @ dozens of developers, claiming they have won a $5000 CLAW token reward, leading them to a clone website that is almost identical to openclaw.ai. This phishing site includes a "Connect Wallet" button, aimed at stealing the assets of connected wallets. Malicious code is hidden in deeply obfuscated JavaScript files, featuring a "nuke" function that clears browser local storage data to hinder forensic analysis, and encodes information such as wallet addresses and transaction values to send back to the C2 server. Researchers identified a suspected cryptocurrency wallet address used to receive stolen funds. The related accounts were created last week and deleted within hours, with no confirmed victims at this time. OpenClaw has become a target for scammers due to its high visibility, and its Discord community has previously encountered a large amount of cryptocurrency spam. Earlier reports indicated that OpenClaw's founder warned to be cautious of cryptocurrency scam emails sent in the name of OpenClaw.

According to market news, Alibaba (Baba.N) will establish a Token Hub business group to strengthen the strategic synergy of its artificial intelligence business.

The Chief Information Security Officer of Slow Fog Technology, 23pds, issued a reminder stating that ClawHub developers should be aware of phishing and credential leakage risks. Currently, ClawHub relies on developers' GitHub one-click login. Previously, the Sha1-Hulud worm stole a large number of developers' GitHub credentials, and attackers may take the opportunity to attack Skills.The attack path is: credential theft → attacker gains GitHub permissions → logs into ClawHub as a developer → publishes malicious Skills to implant backdoors → users download and install, executing malicious code leading to system intrusion.

OpenClaw founder Peter Steinberger criticized the GitHub security vulnerability reporting process for multiple issues. He pointed out that currently, vulnerability reports are only accessible to administrators, making it difficult for teams to effectively distribute and collaborate on handling them.In addition, GitHub's API functionality for vulnerability reporting is insufficient, as it cannot read or post comments through automated agents, which limits the automation capabilities of the security response process. Peter Steinberger also specifically noted that the current vulnerability reports are filled with a large amount of low-quality AI-generated content, requiring hours to sift through, further increasing the burden of security handling work.

The founder of Slow Fog, Yu Xian, reposted a security reminder. Currently, the ClawHub market of OpenClaw has discovered 1,184 malicious skills that can steal SSH keys, encrypted wallets, browser passwords, and open reverse shells. A single attacker has uploaded 677 packages. The top-ranked skill has 9 vulnerabilities and has been downloaded thousands of times.Yu Xian reminds users that text is no longer just text, but instructions. It is recommended to use AI tools in isolated environments, as many OpenClaw skills pose potential risks. Furthermore, Web3 security smart contracts are only part of the issue; the real causes of incidents are far beyond just contracts. A few days ago, Moonwell was hacked for $1.78 million, with the faulty code coming from Co-Authored-By: Claude Opus 4.6.

Bitget announces the launch of Agent Hub, further expanding the infrastructure capabilities for AI Agents to deeply participate in trading within the crypto and TradFi markets. Agent Hub is built on the Bitget API and introduces the officially packaged Model Context Protocol (MCP) toolkit, enabling AI Agents to securely access market data and execution capabilities through standardized interfaces. The platform provides MCP servers maintained by the exchange and supports quick access, allowing developers to complete integration in as little as three minutes, while also equipped with a dedicated sub-account system to enhance permission isolation and asset security.AI is one of Bitget's three core strategies for 2026, and Agent Hub will be embedded within the Bitget panoramic exchange UEX architecture, supporting cross-asset class operations under a unified account and risk system, transforming AI agents from experimental tools into true market participants, and providing production-grade infrastructure support for AI-driven trading.

Pump.fun announces the launch of the GitHub creator fee sharing feature. Users can now allocate creator fees to any GitHub account through the Pump.fun mobile app. More social features are coming soon.

According to SlowMist's monitoring, the official plugin center ClawHub of the open-source AI Agent project OpenClaw is gradually becoming a new target for attackers to implement supply chain poisoning.Due to the platform's lack of a comprehensive and strict review mechanism, a large number of malicious skills have already infiltrated, being used to spread malicious code or deliver harmful content, posing potential security risks to developers and users. According to a report by Koi Security, 341 malicious skills were identified in a scan of 2,857 skills, reflecting a typical "plugin/extension market supply chain poisoning" pattern.SlowMist advises not to treat the "installation steps" in SKILL.md as a trusted source; any command that requires copying and pasting should be audited first; be wary of prompts that "require entering the system password/granting accessibility/system settings," as these are often points of risk escalation; prioritize obtaining dependencies and tools from official channels to avoid executing installation scripts from unknown sources.

ClawdBot (now renamed Moltbot) founder Peter Steinberger posted on social media that the issue of his GitHub account being hijacked has been resolved, and this issue only affected personal accounts, not organizational accounts. He specifically reminded users to be wary of about 20 impersonating X scam accounts.

According to the Jingmen Intermediate Court, the police in Luotian, Huanggang, Hubei recently dismantled a telecom network fraud gang that used offline cash withdrawals and virtual currency for money laundering, arresting 6 criminal suspects. The gang collected scam funds through a "cash withdrawal team," which were then exchanged into USDT by "U currency exchangers" and handed over to foreign fraudsters, forming a complete money laundering chain.Investigations revealed that the gang conducted cash withdrawals for telecom fraud 28 times in the areas surrounding Wuhan, with a total amount involved exceeding 1 million yuan. Currently, the core member Liu is criminally detained for suspected illegal use of information networks, while other members are criminally detained for suspected concealment and disguise of criminal proceeds.