Connect with us

Crypto World

AI Model Finds 22 Firefox Vulnerabilities in Two Weeks

Published

on

Nexo Partners with Bakkt for US Crypto Exchange and Yield Programs

TLDR:

  • Claude Opus 4.6 found 22 Firefox bugs in 2 weeks, 14 flagged high-severity by Mozilla researchers.
  • The 14 high-severity finds equal nearly a fifth of all such Firefox bugs Mozilla fixed in 2025.
  • Claude succeeded in building working exploits in only 2 of several hundred automated attempts.
  • Anthropic spent roughly $4,000 in API credits testing Claude’s exploit development capabilities.

Anthropic’s Claude Opus 4.6 identified 22 security vulnerabilities inside Firefox in just two weeks. Fourteen of those bugs were classified as high-severity by Mozilla. That figure represents nearly a fifth of all high-severity Firefox flaws remediated throughout 2025. 

The findings emerged from a structured research partnership between Anthropic and Mozilla.

Claude AI Uncovers High-Severity Firefox Bugs at Record Speed

The collaboration began as an internal model evaluation.

Anthropic wanted a harder benchmark after Claude Opus 4.5 nearly solved CyberGym, a known security reproduction test. Engineers built a dataset of prior Firefox CVEs and tested whether the model could reproduce them.

Claude Opus 4.6 replicated a high percentage of those historical vulnerabilities. That raised a concern: some CVEs may already have existed in Claude’s training data. 

Advertisement

Anthropic then redirected the effort toward finding entirely new bugs in the current Firefox release.

Within twenty minutes of beginning exploration, Claude flagged a Use After Free vulnerability inside Firefox’s JavaScript engine. Three separate Anthropic researchers validated the bug independently. 

A bug report, alongside a Claude-authored patch, was filed in Mozilla’s Bugzilla tracker.

By the time that first report was submitted, Claude had already produced fifty additional crashing inputs. Anthropic ultimately scanned nearly 6,000 C++ files and submitted 112 unique reports to Mozilla. Most fixes shipped to users in Firefox 148.0.

Advertisement

Firefox 148 Ships Fixes as AI Exploit Research Raises New Alarms

Mozilla triaged the bulk submissions and encouraged Anthropic to send all findings without manual validation. That approach accelerated the pipeline significantly. Mozilla researchers have since begun testing Claude internally for their own security workflows.

Anthropic also tested whether Claude could move beyond discovery into active exploitation. 

Advertisement

Researchers gave Claude access to the reported vulnerabilities and asked it to build working exploits. The goal was to demonstrate a real attack by reading and writing a local file on a target system.

Across several hundred attempts, spending roughly $4,000 in API credits, Claude succeeded in only two cases. 

According to Anthropic’s published findings, the model is substantially better at finding bugs than exploiting them. The cost gap between discovery and exploitation runs at least an order of magnitude.

The exploits that did work required a test environment stripped of standard browser security features. Firefox’s sandbox protections were not present. 

Advertisement

Anthropic noted that sandbox-escaping vulnerabilities do exist and that Claude’s output represents one component of a broader exploit chain.

Anthropic urged software developers to accelerate secure coding practices. The company also outlined a “task verifier” method, where AI agents check their own fixes against both vulnerability recurrence and regression tests. 

Mozilla’s transparent triage process helped shape that approach throughout the research.

Advertisement

Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

South Korea Bars Stablecoins from Corporate Crypto Investment Guidelines Over Legal Conflict

Published

on

Nexo Partners with Bakkt for US Crypto Exchange and Yield Programs

TLDR:

  • South Korea FSC excludes USDT and USDC from corporate crypto investment guidelines over legal conflicts.
  • The Foreign Exchange Transactions Act does not recognize stablecoins as a valid external payment method.
  • Listed companies may invest in the top 20 non-stablecoin assets, capped at 5% of their own capital.
  • A pending amendment to the Foreign Exchange Act could eventually open the door for stablecoin inclusion.

Stablecoins, including USDT and USDC, are set to be excluded from South Korea’s corporate cryptocurrency investment guidelines.

South Korea’s Financial Services Commission (FSC) is preparing rules to allow listed companies to trade digital assets.

According to Herald Economy, regulators have opted to keep dollar-pegged stablecoins out of the approved investment list.

The decision stems from a conflict with the Foreign Exchange Transactions Act. This law does not currently recognize stablecoins as a legal external payment method.

Legal Conflict Shapes the Stablecoin Decision

South Korea’s Foreign Exchange Transactions Act requires external payments to go through designated foreign exchange banks. Stablecoins are not classified as external payment instruments under this law.

Advertisement

Allowing corporate investment in stablecoins would create a direct legal contradiction. The FSC chose to exclude stablecoins from the new corporate investment guidelines.

A partial amendment to the Foreign Exchange Transactions Act was introduced to the National Assembly in October. The amendment aims to formally recognize stablecoins as a means of payment.

The bill, however, remains under review and has not yet been passed. Until the law changes, stablecoins cannot be included in corporate investment guidelines.

Advertisement

Instead, the FSC plans to permit the top 20 non-stablecoin digital assets by market capitalization. Bitcoin and Ethereum are among the assets expected to be approved under these rules.

Investment amounts may also be capped at 5% of a company’s own capital. This limit is designed to reduce exposure during the early market stages.

Some listed companies with cross-border trade had requested stablecoin inclusion in the guidelines. They argued stablecoins support exchange rate hedging and fast international settlements.

The FSC, however, maintained its position and excluded stablecoins from the permitted investment list.

Advertisement

Corporate Stablecoin Access Remains Outside Regulated Guidelines

Even without official guidelines covering stablecoins, companies can still trade them through other channels. Personal wallets like MetaMask and overseas exchanges such as Coinbase’s OTC platform remain accessible to corporations.

These transactions, however, operate outside any officially regulated framework. The guidelines do not block companies from using stablecoins entirely.

Authorities noted that some companies already use stablecoins through personal accounts or overseas exchange platforms for trade.

These transactions occur outside formal banking channels. The FSC acknowledged this but still chose not to formalize stablecoin use in the guidelines. Regulators placed legal consistency above industry convenience in this case.

Advertisement

An industry insider confirmed the corporate guidelines task force has wrapped up its work. “I know that the working task force on corporate guidelines has been completed,” the insider said.

They added, “It is in line with the legislative status of the Phase 2 Digital Asset Framework Act, so we have to wait and see, but it is a knotted situation.” Progress, therefore, depends heavily on how the broader legal framework develops.

The FSC’s approach signals a cautious entry into corporate digital asset participation. By limiting access to top non-stablecoin assets, regulators aim to manage financial risk.

Companies seeking stablecoin access will likely need to wait for the Foreign Exchange Transactions Act to be amended.

Advertisement

Source link

Advertisement
Continue Reading

Crypto World

Stablecoin Transaction Volume Hits a New Record High as USDC Surpasses USDT

Published

on

Stablecoin Transaction Volume Hits a New Record High as USDC Surpasses USDT

Stablecoins have hit an all-time high in monthly transaction volume, as Circle’s USDC (USDC) flipped Tether’s USDt (USDT), new data shows.

Key takeaways:

  • Stablecoin monthly transaction volume reached a record $1.8 trillion in February.

  • USDC comprised 70% of all stablecoin volume.

  • Rising stablecoin supply on exchanges puts crypto markets in a good position to recover.

USDC “consistently” flips USDt transfer volume

The stablecoin transfer volume reached $1.8 trillion in February, setting a monthly record, according to data from Allium.

Stablecoins are cryptocurrencies designed to maintain a stable value, typically pegged to fiat currencies like the US dollar, and can be hosted on multiple blockchains.

Advertisement
Stablecoin transaction volume ($). Source: Allium

Similarly, the volume of USDC transactions reached a high of $1.26 trillion, representing a new milestone in the adoption of the second-largest stablecoin by market cap since its launch in September 2018. 

Related: Florida Senate passes state-level stablecoin bill, awaits DeSantis’ signature

This was more than double that of USDt, whose transfer volume was $514 billion in February.

Transaction volume by stablecoin. Source: Allium

In fact, USDC has “consistently flipped” Tether in transfer volume over the last few months, founder at Moonrock Capital, Simon Dedic, said in a Friday post on X. 

USDC’s usage comes as a “surprise” given that its market cap is less than half that of USDt, Dedic added. USDC is the second-largest stablecoin by market cap at $77.4 billion, compared to USDt’s $184 billion.

Moreover, USDC’s supply has grown faster than USDt’s in recent weeks. Over $3 billion in USDC has been printed already in March, according to market intelligence firm Arkham, as USDt’s supply has remained relatively unchanged.

Advertisement

As Cointelegraph reported, USDC issuer Circle Internet Group reported strong Q4/2025 earnings, attributed to rapid growth in the USDC’s business and expanding payments operations.

Advertisement

More stablecoin liquidity suggests “buying power”

The Stablecoin Supply Ratio (SSR), or the ratio of the Bitcoin (BTC) market cap relative to stablecoin market cap, is “steadily recovering after crashing” in February, said CryptoQuant analyst Sunny Mom in a Friday Quicktake post, adding:

“This shows buying power is returning to the market.”

Bitcoin: Stablecoin Supply Ratio: Source: CryptoQuant

Meanwhile, Bitcoin’s latest push to $74,000 was fueled by a recovery in stablecoin supply on crypto exchanges, which rose to a three-week high of $66.5 billion on Friday. 

Stablecoin supply on exchanges. Source: CryptoQuant

Stablecoin inflows to exchanges have boosted the SSR alongside Bitcoin’s (BTC) price. On March 5, the total amount of stablecoins transferred to the exchange amounted to nearly $5.14 billion, up from $1.14 billion on March 1.

More stablecoins on exchanges means more buying power for cryptocurrencies. In the past, the return of sidelined capital to exchanges was a major catalyst for the start of Bitcoin bull markets.