Trade
Trading Type
Spot
Trade crypto freely
Alpha
Points
Get promising tokens in streamlined on-chain trading
Pre-Market
Trade new tokens before they are officially listed
Margin
Magnify your profit with leverage
Convert & Block Trading
0 Fees
Trade any size with no fees and no slippage
Leveraged Tokens
Get exposure to leveraged positions simply
Futures
Futures
Hundreds of contracts settled in USDT or BTC
Options
HOT
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Futures Kickoff
Get prepared for your futures trading
Futures Events
Participate in events to win generous rewards
Demo Trading
Use virtual funds to experience risk-free trading
Earn
Launch
Investment
Simple Earn
VIP
Earn interests with idle tokens
Auto-Invest
Auto-invest on a regular basis
Dual Investment
Buy low and sell high to take profits from price fluctuations
Quant Fund
VIP
Top asset management team helps you profit without hassle
Crypto Loan
0 Fees
Pledge one crypto to borrow another
Lending Center
One-Stop Lending Hub
VIP Wealth Hub
New
Customized wealth management empowers your assets growth
Private Wealth Management
Customized asset management to grow your digital assets
Staking
Stake cryptos to earn in PoS products
BTC Staking
HOT
Stake BTC and earn 10% APR
GUSD Minting
New
Use USDT/USDC to mint GUSD for treasury-level yields
Soft Staking
Earn rewards with flexible staking
More
- Trending TopicsView More
50.3K Popularity
102.7K Popularity
222.9K Popularity
167K Popularity
17.3K Popularity
- Pin
Security Breach Alert
Popular npm packages got hit. Bad news. The attack targeted qix through phishing and now chalk, strip-ansi, and color-convert are compromised. These tools? They're everywhere in web3 projects.
The malicious stuff seems pretty sneaky. It hooks into wallet functions. It changes where your ETH and SOL transactions go. It even messes with addresses in network responses.
This looks like code injection. Unauthorized code sneaks into legitimate packages. Then it does things without you knowing. Kind of scary when you think about it. Your apps become vulnerable once you use these packages.
Protecting yourself isn't too complicated. Check addresses before confirming transactions. Look again after pasting addresses - subtle changes matter. Keep an eye on your transaction history. Maybe get a hardware wallet for the big stuff.
Input validation matters. So does dependency security. The whole crypto world needs to stay alert. Attackers love going after popular tools. Not entirely clear how many projects might be affected already, but it's probably significant.