Gate Square “Creator Certification Incentive Program” — Recruiting Outstanding Creators!
Join now, share quality content, and compete for over $10,000 in monthly rewards.
How to Apply:
1️⃣ Open the App → Tap [Square] at the bottom → Click your [avatar] in the top right.
2️⃣ Tap [Get Certified], submit your application, and wait for approval.
Apply Now: https://www.gate.com/questionnaire/7159
Token rewards, exclusive Gate merch, and traffic exposure await you!
Details: https://www.gate.com/announcements/article/47889
NOFX AI and Aster Users Face Critical Key Breach Vulnerability: What You Need to Know
A significant security vulnerability has emerged within the NOFX AI automated trading system, prompting urgent alerts from security experts. According to reports from SlowMist’s Yu Jian, users of this open-source platform have fallen victim to cryptocurrency theft incidents linked to a critical keybreach compromise.
The Scope of the Vulnerability
The security flaw extends beyond NOFX AI users alone. Aster platform users have also been identified as vulnerable, with their wallet private keys at risk of exposure. The key breach has led to compromised sensitive credentials, including both wallet private keys and API access keys for centralized and decentralized exchanges. While the NOFX AI system has demonstrated strong technical performance capabilities, these security flaws underscore that operational excellence does not guarantee protection against targeted attacks.
Response and Mitigation Efforts
Security teams are actively collaborating to identify and notify affected users of potential exposure. Yu Jian emphasized that protective action is already underway, with teams working to contain the breach and minimize potential losses.
Immediate Steps for Users
To safeguard your assets, security experts recommend users take immediate action: rotate compromised API keys without delay, transfer assets from potentially exposed wallets, and strengthen access controls. Vigilance is critical during this period as attackers may continue exploiting the keybreach vulnerability.
The incident serves as a reminder that even well-regarded trading systems require regular security audits and user awareness to maintain protection in an evolving threat landscape.