Huoxun Finance reported on March 31 that 360 Digital Security Group's self-developed multi-agent collaborative vulnerability mining system discovered a high-risk vulnerability in the OpenClaw platform—a MEDIA protocol Prompt injection vulnerability that bypasses tool privileges and leaks local files. This vulnerability has been officially confirmed by the China National Vulnerability Database (CNNVD), affecting more than 50 countries and regions worldwide, with over 170,000 publicly accessible OpenClaw instances at risk. The core risk of this vulnerability lies in the fact that the MEDIA protocol runs at the output post-processing layer, completely bypassing platform tool policy controls. Even if the agent disables all tool calls, attackers can launch attacks with only basic group chat member privileges, directly stealing sensitive server information and easily triggering subsequent network attacks.

According to official information, the decentralized derivatives trading platform edgeX has launched an EDGE airdrop query page and will open EDGE token trading at 20:30 today.

According to Huoxun Finance, Mitsubishi Corporation plans to integrate with JPMorgan Chase's blockchain payment platform soon, becoming the first Japanese company to use the service. This service supports instant international fund transfers, and JPMorgan Chase will use it to promote its blockchain payment products to more Japanese companies. Against this backdrop, Japanese financial institutions are accelerating their deployment of blockchain and stablecoins: major banks such as Mitsubishi UFJ and Mizuho are testing yen-denominated stablecoins, and Japanese regulators are considering approving the listing of cryptocurrency ETFs as early as 2028.

According to Huoxun Finance, the U.S. Department of Labor has released a proposal to allow 401(k) retirement plans to include alternative assets such as private equity and cryptocurrencies, aiming to break down long-standing investment barriers. The proposal requires trustees to rigorously review asset performance, fees, and liquidity, and those who comply will receive legal protection. Private equity giants such as Blackstone, KKR, and Apollo are expected to open up new sources of capital, and their stock prices rose after the announcement. Treasury Secretary Bessenter stated that this move is a preliminary step to "protect retirement assets." The proposal will have a 60-day public comment period. Critics, such as Senator Warren, warn that this move could expose retirement savings to high-risk assets.

According to Huoxun Finance, the whale wallet 15oD9P withdrew 1,635 BTC (worth approximately $110.7 million) from Bybit, Binance, Bullish.com, and OKX in the past week.