News

According to Odaily, three security vulnerabilities have been discovered in the official mcp-server-git maintained by Anthropic. These vulnerabilities can be exploited through prompt injection attacks, allowing attackers to trigger the vulnerabilities via malicious README files or compromised web pages without direct access to the victim's system. The vulnerabilities include: CVE-2025-68143 (unrestricted git_init), CVE-2025-68145 (path validation bypass), and CVE-2025-68144 (parameter injection in git_diff). If these vulnerabilities are used in conjunction with the file system MCP server, attackers can execute arbitrary code, delete system files, or read the contents of any file into the context of a large language model. Cyata pointed out that since mcp-server-git does not validate the repo_path parameter, attackers can create Git repositories in any directory of the system. In addition, by configuring a clean filter in .git/config, attackers can run shell commands without execution permissions. Anthropic assigned CVE numbers and submitted patches for these vulnerabilities on December 17, 2025. Users are advised to update mcp-server-git to version 2025.12.18 or later. (cyata)

According to Odaily, Dune data shows that the weekly fee income of the prediction market exceeded $2.7 million, setting a historical record. Among them, opinion markets accounted for 54.3%, while Polymarket's 15-minute price fluctuation market generated $787,000 in revenue, accounting for 28.4% of the total fee income.

BlockBeats News, January 21st, according to Dune Data, the prediction market's Sunday trading volume exceeded $8.14 billion, reaching a new all-time high. The total transaction volume on prediction market platforms in January has reached approximately $10.5 billion so far, and this month is expected to break the monthly record, achieving the sixth consecutive month of trading activity growth. Based on this Sunday's trading volume, Kalshi remains the largest trading platform, with a daily trading volume of over $5.35 billion on Sunday alone, while Polymarket's trading volume is approximately $1.27 billion. The emerging prediction platform Opinion, supported by YZi Labs, had a daily trading volume of around $84 million, continuing to eat into the market share of the two major prediction markets.