PANews reported on March 31 that, according to Jinshi, 360 Digital Security Group recently discovered a high-risk vulnerability in the OpenClaw platform using itsPANews reported on March 31 that, according to Jinshi, 360 Digital Security Group recently discovered a high-risk vulnerability in the OpenClaw platform using its

360 AI Agent discovered a high-risk vulnerability in OpenClaw, potentially affecting 170,000 instances worldwide.

2026/03/31 12:44
1 min read
For feedback or concerns regarding this content, please contact us at crypto.news@mexc.com

PANews reported on March 31 that, according to Jinshi, 360 Digital Security Group recently discovered a high-risk vulnerability in the OpenClaw platform using its independently developed 360 Multi-Agent Collaborative Vulnerability Discovery System—a MEDIA protocol Prompt injection vulnerability that bypasses tool privileges and leaks local files. This vulnerability has been officially confirmed by the China National Vulnerability Database (CNNVD), affecting more than 50 countries and regions worldwide, with over 170,000 publicly accessible OpenClaw instances at risk. The core risk of this vulnerability lies in the fact that the MEDIA protocol runs at the output post-processing layer, completely bypassing platform tool policy controls. Even if the agent disables all tool calls, attackers can launch attacks with only basic group chat member privileges, directly stealing sensitive server information and easily triggering subsequent network attacks.

Market Opportunity
Prompt Logo
Prompt Price(PROMPT)
$0.0283
$0.0283$0.0283
-2.68%
USD
Prompt (PROMPT) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact crypto.news@mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

Warning: npm core package axios version 1.14.1 is under active supply chain attacks.

Warning: npm core package axios version 1.14.1 is under active supply chain attacks.

PANews reported on March 31 that, according to Cointelegraph, Socket detected an active supply chain attack on version 1.14.1 of the npm core package axios. Attackers
Share
PANews2026/03/31 13:03
Won-pegged stablecoin KRW1 launches in South Korea on Avalanche

Won-pegged stablecoin KRW1 launches in South Korea on Avalanche

Stablecoin development in South Korea has advanced with the launch of KRW1, a won-pegged token issued on the Avalanche blockchain. Seoul-based digital asset firm BDACS announced the launch of KRW1 on September 17, a stablecoin fully backed by South Korean…
Share
Crypto.news2025/09/18 15:48
First Multi-Asset Crypto ETP Opens Door to Institutional Adoption

First Multi-Asset Crypto ETP Opens Door to Institutional Adoption

The post First Multi-Asset Crypto ETP Opens Door to Institutional Adoption appeared on BitcoinEthereumNews.com. The US Securities and Exchange Commission (SEC) has officially approved the Grayscale Digital Large Cap Fund (GDLC) for trading on the stock exchange. The decision comes as the SEC also relaxes ETF listing standards. This approval provides easier access for traditional investors and signals a major regulatory shift, paving the way for institutional capital to flow into the crypto market. Grayscale Races to Launch the First Multi-Asset Crypto ETP According to Grayscale CEO Peter Mintzberg, the Grayscale Digital Large Cap Fund ($GDLC) and the Generic Listing Standards have just been approved for trading. Sponsored Sponsored Grayscale Digital Large Cap Fund $GDLC was just approved for trading along with the Generic Listing Standards. The Grayscale team is working expeditiously to bring the FIRST multi #crypto asset ETP to market with Bitcoin, Ethereum, XRP, Solana, and Cardano#BTC #ETH $XRP $SOL… — Peter Mintzberg (@PeterMintzberg) September 17, 2025 The Grayscale Digital Large Cap Fund (GDLC) is the first multi-asset crypto Exchange-Traded Product (ETP). It includes Bitcoin (BTC), Ethereum (ETH), XRP, Solana (SOL), and Cardano (ADA). As of September, the portfolio allocation was 72.23%, 12.17%, 5.62%, 4.03%, and 1% respectively. Grayscale Digital Large Cap Fund (GDLC) Portfolio Allocation. Source: Grayscale Grayscale Investments launched GDLC in 2018. The fund’s primary goal is to expose investors to the most significant digital assets in the market without requiring them to buy, store, or secure the coins directly. In July, the SEC delayed its decision to convert GDLC from an OTC fund into an exchange-listed ETP on NYSE Arca, citing further review. However, the latest developments raise investors’ hopes that a multi-asset crypto ETP from Grayscale will soon become a reality. Approval under the Generic Listing Standards will help “streamline the process,” opening the door for more crypto ETPs. Ethereum, Solana, XRP, and ADA investors are the most…
Share
BitcoinEthereumNews2025/09/18 13:31