熊大🚦 (✱,✱)

1/4 ⚠️ Vulnerability Analysis: Purrlend Exploit Incident Analysis On April 25, 2026, the lending protocol @purrlend was exploited through its contracts on #MegaETH and #HyperEVM, resulting in a total loss of approximately $1.5M. Root cause: The Purrlend admin account with adminRole is suspected to have been compromised, which allowed the attacker address to obtain BRIDGE_ROLE permissions, pass the _onlyBridge() security check, and carry out the attack.

🧵1/ 6 🚨 GoPlus Security Alert: ZetaChain Exploited — Revoke Permissions to the Vulnerable Contract Immediately! On April 26, 2026, the call() function in @ZetaChain’s contract on #ZetaChain lacked access control and failed to validate the message parameter. Meanwhile, the execute() function in its contract on #Ethereum lacked validation of the data parameter. The attacker exploited this vulnerability and, through an attack contract, stole USDC that victim EOA addresses had approved to the vulnerable contract 0x48b9 (Ethereum GatewayEVM Proxy). Please immediately revoke token approvals granted to the vulnerable contract 0x48b9aacc350b20147001f88821d31731ba4c30ed (Ethereum GatewayEVM Proxy) to prevent your tokens from being stolen!

Glad to see #GoPlusSecurity AI security capabilities #AgentGuard powering SMART Benchmark 🚀 SMART Benchmark is a standardized evaluation framework for AI trading agents, co-hosted by @ManicTrade and @SonicSVM, built on real trading scenarios and scored across 5 key dimensions to help users better assess agent trading decision-making. 🎯 Participate in the evaluation & win rewards 1️⃣ Leaderboard rewards •Test your AI Agent and get ranked: benchmark.manic.trade 🏆 Compete for the Top 100 share of a $2,000 prize pool 2️⃣ Engagement rewards • Follow @GoPlusSecurity and @ManicTrade • Tag 2 friends • Post your score screenshot under this tweet 🏆 Reward rules (25 winners total, $5U each) • Top 10 highest scores • Top 10 lowest scores • 5 randomly selected participants 📅 Deadline: April 30 (Rewards via X within 7 working days)

Congrats to @custos_labsxyz 👏 #Custos is officially live, addressing a long-standing structural friction onchain: between blind trust and liquidity-constrained locking, users have faced inefficient risk–reward trade-offs. Custos transforms locking into verifiable, programmable commitments, combined with structured prediction markets,making every onchain action a more efficient risk–reward decision.

🔥全网疯玩！SBTI测验不过瘾？赛博版来了——LXTI龙虾人格测试 一只虾精准扒光你和AI的真实关系：控制狂、甩锅王、赛博舔狗、电子弃婴…16种人格句句扎心，12道题速测真实属性，还能让🦞Agent同题答题，生成双面诊断书：你的自画像VS龙虾眼中的你！ 立即测测你的虾系人格👉lxti.gopluslabs.io

刚被一只虾诊断为「僵尸用户」。 它说："你下载了所有 AI 产品，但月均打开次数不超过 3 次。" SBTI 测你是哪种社畜，LXTI 测你怎么被虾拿捏 🦞 lxti.gopluslabs.io

Skills are becoming onchain assets. @GoPlusSecurity’s SafuSkill Launchpad brings monetization into the agent stack on BNB Chain, letting builders earn directly from the skills they ship. Note: This post is for informational purposes only and not financial advice. DYOR.

Thanks to BNB Chain（@BNBCHAIN） for the perspective: “Skills are becoming onchain assets.” #GoPlus SafuSkill Launchpad is driving this evolution: Submit a Skill → Launch a tokenized asset → Generate continuous revenue To build a more mature developer ecosystem, #SafuSkill Launchpad defines a set of onchain rules and execution mechanisms: • Who can launch? – The developer themselves – Or via GitHub-verified authorization • How do developers earn? – Verify authorship via GitHub → bind a receiving wallet → claim accumulated revenue – Each transaction generates fees, continuously shared with developers: 1% during the Bonding Curve phase → 1.6% during the PancakeSwap phase • Asset logic – One Skill corresponds to one unique token – Standardized issuance (based on BNB Chain + Flap protocol) – Total supply / allocation / lockups are fully onchain and verifiable • How it runs – CREATE2 deterministic deployment (predictable & verifiable addresses) – Automatic DEX integration (PancakeSwap) to provide liquidity • How security is enforced upfront – Mandatory scans via AgentGuard (code / permissions / data flow) – Post-launch visualized risk scoring SafuSkill #Launchpad is building a developer incentive infrastructure layer — turning Skills from functions into economic units with community, liquidity, and continuous revenue. This will drive the continuous emergence of higher-quality and more innovative Skills. Only when Skills have sustainable revenue and liquidity can developers commit long-term and the ecosystem achieve positive growth. 👉safuskill.ai/launchpad

🚨 Fake Google Meet scam resurfaces Malicious domains: googlemeetinterview[.]help google-meetingsnow[.]click Attackers simulate a “someone is joining the meeting” screen, then trigger a popup claiming “your Google Meet version is outdated, please update.” Users are lured into downloading and executing a malicious program. Once executed, the attacker can gain remote access to the device and steal wallet private keys. 🛡️ Security Recommendations: 1. Treat DM links with caution. Follow the #GoPlus Anti-Phishing “Four Don’ts”: -Do not click unknown links -Do not install untrusted software -Do not sign unclear transactions -Do not transfer assets to unverified addresses 2. Install the GoPlus Security extension to block phishing links, risky signatures, approvals, and transactions in real time 👉 chromewebstore.google.com/search/GoPlus

🚀 #GoPlus SafuSkill Launchpad is now LIVE —Turn your AI Skill into an asset You built an AI Skill. People are using it. It’s already running inside other Agents— but you haven’t earned a single dollar. The problem isn’t lack of value. It’s the lack of monetization infrastructure. 👉SafuSkill Launchpad is now live Built on BNB Chain (@BNBCHAIN), integrated with the Flap protocol (@flapdotsh), designed to solve this exact problem: →List your Skill →Launch a token →Auto-integrate with PancakeSwap →More trading = more earnings 🛡 Built-in security: AgentGuard scanning + GitHub verification SafuSkill is the secure marketplace for AI Agent Skills Not just used— but traded, priced, and monetized, forming a full value loop: -Marketplace (Discovery) -Launchpad (Issuance) -Earnings (Auto-accrual) This is the Skill Economy—where Skills become tradable, yield-generating on-chain assets. Try it now👇 safuskill.ai/launchpad

#ClaudeCode puts “Security First” at the core of its design philosophy — by combining static rules + AI-driven detection + OS-level isolation + protocol-layer defenses, to build a comprehensive, multi-dimensional security architecture. This demonstrates the team’s ability to balance: • enterprise-grade security • real-world adversarial conditions • the boundaries of developer tooling 👉 A true “Security First” approach — and a model worth learning for all AI Agents. goplussecurity.medium.com/%EF%B8%8F-from…

@custos_labsxyz @edgeX_exchange > 2

Blitz Mini Prediction ➡️How many tweets until @edgeX_exchange reopens comment section? ❗️Retweets are not included. 🔘Options: • ≤ 2 • > 2 📰 JUST IN EdgeX TGE will launch soon. Users can now check airdrop eligibility, but contributors get few😒 ⏰Time: The time when @edgeX_exchange opens comment section or posts more than 2 tweets. 💰 Rewards: • 50 USDT (5 winners) • 500 Community XP (5 winners) How to join: 1️⃣ Comment your prediction 2️⃣ Retweet this post Let’s see the result.

🐶💩@PerleLabs @PerleFDN 💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩

Glad to see @Polyflow_PayFi × @GoPlusSecurity 🤝 bringing security into real-time PayFi. As AI agents scale high-frequency transactions, it’s not just about speed — but verifiability and protection. #GoPlus brings security into this new payment paradigm: • Contract risk checks before execution • Protection for AI-driven payment flows • A safer foundation for high-frequency, real-world transactions 🛡️

欢迎开发者来GoPlus SufeSkill 市场提交自己的Skill，之后会有更多的功能上线，支持开发者更好的介绍，推广自己的Skills，GoPlus 努力为开发者保驾护航💪

🆕 GoPlus GoPredict Plugin Update Prediction markets are growing fast — but two long-standing issues remain: 1️⃣ Outcomes can be manipulated Some markets rely on announcements from a single entity, making risks hard to identify in advance. 2️⃣ Rules are complex and misleading Settlement rules can be long, vague, or hide key conditions. 👉To address this, GoPredict introduces three new features: 🔴 Manipulation Risk Analysis Detects whether a market outcome could be controlled by a single entity. 📜 Rule Risk Alerts AI scans market rules to surface hidden clauses, subjective definitions, and unusual settlement conditions. 💡 Plain-Language Tag Explanations Complex indicators like liquidity and market imbalance are translated into simple explanations. GoPredict is bringing to prediction markets: - More transparent rules. - Clearer risks. - Safer decisions. Install the #GoPlus plugin and try GoPredict 👇 chromewebstore.google.com/search/GoPlus

🚀Introducing #GoPlus SafuSkill — A Security-First Skills Marketplace We conducted a full static analysis of the top 100 most frequently downloaded Skills in the ClawHub ecosystem. The results were alarming: 🔴 21% High Risk ⚠️ 17% Medium Risk ✅ 62% Passed Which means: 1 in 5 popular Skills contains dangerous capabilities. For example: -Network tunneling -Sensitive API access -Automated external requests The problem is: AI Agent Skills can: -Access your files -Execute transactions -Control your assets When users install Skills without fully understanding what they do, the risk can quickly escalate. That’s why #GoPlus introduces: 🛡️ GoPlus SafuSkill The security-first marketplace for AI Agent Skills. SafuSkill is built on @BNBCHAIN, bringing together Skills browsing and discovery, security scanning, and developer tools to provide security-first infrastructure for the AI Agent ecosystem. 👉Try it now →safuskill.ai

Mini Prediction Battle⚔️ ➡️Will FDV of「龙虾」(CA: 0xeCCBb861c0dda7eFd964010085488B69317e4444) surpass $30M before March 13, 15:59:59 UTC? 📰 JUST IN 「龙虾」(which means openclaw in English) just got listed on @binance alpha. 🔘Options: • Yes • No ⏰Time: Close on Mar 13, 2026, 15:59:59 UTC 💰 Rewards: • 100 USDT (10 winners) • 1,000 Community XP (10 winners) How to join: 1️⃣ Comment your choice (Yes / No) 2️⃣ Retweet this post Let’s see who reads the market best.

@custos_labsxyz @binance yes