News

BlockBeats News, January 21st, according to HyperInsight monitoring, as the market continued to decline, "Brother Whale" Huang Licheng's 25x ETH long position was completely liquidated, and after numerous defeats, he once again opened a 600 ETH position, worth approximately $1.75 million. His account has lost $4.3 million in the past month, bringing his total losses to $22.83 million.

According to Odaily, three security vulnerabilities have been discovered in the official mcp-server-git maintained by Anthropic. These vulnerabilities can be exploited through prompt injection attacks, allowing attackers to trigger the vulnerabilities via malicious README files or compromised web pages without direct access to the victim's system. The vulnerabilities include: CVE-2025-68143 (unrestricted git_init), CVE-2025-68145 (path validation bypass), and CVE-2025-68144 (parameter injection in git_diff). If these vulnerabilities are used in conjunction with the file system MCP server, attackers can execute arbitrary code, delete system files, or read the contents of any file into the context of a large language model. Cyata pointed out that since mcp-server-git does not validate the repo_path parameter, attackers can create Git repositories in any directory of the system. In addition, by configuring a clean filter in .git/config, attackers can run shell commands without execution permissions. Anthropic assigned CVE numbers and submitted patches for these vulnerabilities on December 17, 2025. Users are advised to update mcp-server-git to version 2025.12.18 or later. (cyata)

According to Odaily, Dune data shows that the weekly fee income of the prediction market exceeded $2.7 million, setting a historical record. Among them, opinion markets accounted for 54.3%, while Polymarket's 15-minute price fluctuation market generated $787,000 in revenue, accounting for 28.4% of the total fee income.