Will Ripple Be the Death of SWIFT?

The post Crypto.com team ‘covered up a breach’ – Scattered Spider breach, revealed! appeared on BitcoinEthereumNews.com. Key Takeaways Were Crypto.com customer funds affected? No, Crypto.com confirmed that no customer funds were accessed or at risk. Only a very small number of users’ partial personal information was affected. Did Crypto.com disclose the breach publicly? No, the company did not publicly notify the impacted users, which drew criticism from blockchain investigator ZachXBT. Crypto.com reportedly suffered a previously undisclosed data breach linked to the Scattered Spider hacking group, raising concerns over its security posture. Details of the attack According to a Bloomberg investigation, the attack involved teenage hackers, including 18-year-old Noah Urban from Florida, who specialized in phishing employees at telecom, tech, and cryptocurrency firms. Urban and his collaborators accessed sensitive user information. The group previously targeted MGM Resorts and other corporations. Crypto.com acknowledged that the breach impacted “a very small number of individuals” but emphasized that no customer funds were compromised. Crypto.com’s response Despite this, the company did not notify the affected users publicly. Remarking on the same, Crypto.com CEO, Kris Marszalek, noted,  “Any suggestion that we did not report or disclose a security incident is completely unfounded – as we reported in a NMLS Notice of Data Security incident filing and in additional reports with the relevant jurisdictional regulators, we detected a phishing campaign that targeted one of our employees in 2023.” Marszalek stated that the incident was contained within hours, with no customer funds ever at risk, and only a very limited number of users’ partial personal information was affected. He even emphasized the company’s “security-first” culture. What does ZachXBT have to say about this breach? However, blockchain investigator ZachXBT took to X to call out Crypto.com for not disclosing the data breach. He said, “Your team covered up a breach that impacted the personal information of your users.” He added,  “They’ve been breached several times.”…

Author: Pan Zhixiong Ethereum has successfully addressed the scaling issue over the past few years by deploying multiple Layer 2 solutions, such as Arbitrum, Optimism, and Base, resulting in reduced transaction costs and increased efficiency. However, this has led to a fragmented user experience: each L2 network acts like an isolated island, with users facing cumbersome steps, different bridging protocols, and complex asset and gas management when crossing chains. To address this pain point, the Ethereum core team recently proposed the Ethereum Interop Layer (EIL). To understand EIL, we first need to review its foundation—ERC-4337. ERC-4337 is an account abstraction standard proposed by Ethereum. It requires no changes to the underlying Ethereum protocol, implementing a new type of account structure—the smart account—simply by deploying smart contracts. This type of account not only supports advanced features such as social recovery, multisignature, and batch operations, but also allows for gas payments using ERC-20 tokens via smart contracts. However, despite the many technological innovations brought by ERC-4337, its adoption in practice remains limited. Fragmented user experience, difficulties in multi-chain collaboration, high gas costs, and ecosystem compatibility issues all restrict the widespread adoption of 4337. The EIL was developed to address these issues on top of ERC-4337. EIL is an additional multi-chain interoperability protocol built upon the ERC-4337 framework . It extends the single-chain account abstraction to multi-chain account interoperability, enabling a seamless experience across multiple L2 networks. Specifically, EIL implements two important innovations: one-signature multi-chain operations (bulk authorization) and a competitive funding mechanism for cross-chain liquidity providers (XLPs). The first innovation, bulk authorization , allows users to authorize multiple operations across multiple L2 networks with a single signature. Specifically, the wallet first constructs its own UserOperation on each relevant chain, then integrates these operations into a Merkle tree. Users only need to sign the root of the tree once. When a smart account on each chain verifies a received UserOperation, it only needs to verify that it belongs to the Merkle tree and that the signature is valid to execute the operation. This approach significantly simplifies the cross-chain operation process for users. The second innovation, the auction-based funding mechanism, introduces a role called Cross-chain Liquidity Provider (XLP). XLPs are responsible for providing asset transfer and gas payment services between different chains. When a user locks assets on the source chain and submits a cross-chain request, multiple XLPs can bid on the request through on-chain auction. The XLP that wins the bid provides a cross-chain asset transfer voucher, allowing the user to directly obtain funds and gas payments on the target chain to complete the required cross-chain operation. Only after the transaction is completed will the XLP claim the user's previously locked assets on the source chain. To ensure security and fairness, XLPs must be staked on the Ethereum mainnet (L1) and subject to a strict dispute arbitration mechanism. If an XLP violates the rules, the staked assets will be forfeited, thus ensuring its integrity through economic incentives . It's worth emphasizing that EIL doesn't require any changes to the consensus protocol of the Ethereum mainnet or L2 network during its implementation . All implementations are based on smart contracts and the existing ERC-4337 account abstraction framework. This design not only reduces the difficulty of implementation but also significantly reduces the security risks the chain itself may face. Of course, this design also shifts the pressure and complexity to the wallet and off-chain infrastructure . The wallet needs to support complex multi-chain transaction construction, one-signature multi-chain verification, interaction mechanisms with CrossChainPaymaster and XLP, and needs to provide a simple and user-friendly interface. The off-chain infrastructure, on the other hand, needs to build a robust auction market, monitor XLP fund flows in real time, and manage risks. Ultimately, EIL provides users with a single-chain-like experience. In the future, when users open EIL-enabled wallets, they will no longer need to frequently switch chains, manage cross-chain assets, or endure lengthy cross-chain waits and cumbersome procedures. All complex cross-chain details will be completed automatically outside the user's view, gradually unifying the user experience across the entire Ethereum L2 ecosystem and truly realizing the vision of multi-chain integration and seamless interoperability. EIL also opens up a whole new possibility for the entire Ethereum ecosystem: it not only solves the cross-chain user experience problem, but more importantly, it truly allows multiple L2 networks to "become one" in a secure, decentralized, and trustless way.

Detail: https://coincu.com/markets/nomura-fed-rate-cut-forecast-2025/