Article URL: https://www.bbc.com/news/live/cvgl73pxgndwt Comments URL: https://news.ycombinator.com/item?id=49825580 Points: 11 # Comments: 1
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
A DeFi security researcher published a vulnerability surface analysis of HashKey Exchange, a cross-chain decentralized exchange with approximately $1.73 billion in total value locked across Ethereum and several Layer 2 networks. The audit, dated September 24, 2026, examined smart contracts including the router, vault, pool, bridge adapters, and governance proxy components. Researchers identified nine vulnerability categories, with three rated high severity: a single externally owned account controlling contract upgrades without a timelock or multi-signature safeguard, re-entrancy risks in withdrawal and swap functions, and price oracle manipulation exposure on low-liquidity assets. Additional medium-severity issues include flawed cross-chain bridge message verification that could enable double-spend attacks, misconfigured access controls, and front-running risks on limit-order execution. The protocol received an overall risk score of 7 out of 10, with auditors noting that concentrated privileged control and the re-entrancy and oracle weaknesses significantly elevate its risk profile.
A developer has shared an updated account of using an AI assistant to automate genealogy research, building on an earlier post that drew mixed feedback. The AI-driven workflow searches genealogy sites and official archives, transcribes records, and updates a GEDCOM family tree file, repeating the process generation by generation. To address concerns about data reliability, the developer applies the GEDCOM quality rating system, assigning lower trust scores to genealogy sites and higher scores to verified official civil or parish records. The setup uses separate skills for each genealogy and archive site, with varying technical approaches to handle bot protection, including Playwright automation and Chrome in debug mode for Cloudflare-protected sites. The developer acknowledged limitations such as AI hallucination risks and the uneven trustworthiness of genealogy platforms, but argued these are mitigated when responses are grounded in sourced data.
Simple Memo, an iPhone note-taking app, uses Apple's Foundation Models framework to power a voice-driven feature called Dialogue Memo, where users speak an idea and the app asks follow-up questions to build a structured note. Early testing revealed that letting the model freely generate text produced unreliable results, including repeated commentary, unanswered questions, and mismatched language prefixes. Developers responded by restricting the model to selecting from a predefined Swift enum of question choices, with fixed, human-reviewed text mapped to each option in code. Note layout is similarly constrained: the model only returns a structural arrangement of the user's own sentences, and any invalid layout triggers a retry or falls back to a simple bullet-point format. All processing runs entirely on-device with no cloud fallback, and hard limits such as a six-question cap and a 3,600-character transcript ceiling keep the interaction concise.
A developer created ClipboardX to solve a personal frustration of manually transferring text between an Android phone and a Windows PC via messaging apps. Android's background process restrictions blocked the original design, forcing a pivot to embed clipboard access inside a custom keyboard. Building the keyboard nearly derailed the project until the developer adopted an open-source keyboard foundation and focused only on clipboard-specific features. Once Android and Windows could communicate, deeper reliability challenges emerged around message delivery, retries, deduplication, and reconnection handling. What began as a simple side project ultimately evolved into a small distributed systems problem requiring robust state management and observability.
Discussion (0)
Log in to join the discussion and vote.
Log in