Trade
Basic
Futures
Futures
Hundreds of contracts settled in USDT or BTC
Options
HOT
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Futures Kickoff
Get prepared for your futures trading
Futures Events
Participate in events to win generous rewards
Demo Trading
Use virtual funds to experience risk-free trading
Earn
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Launchpad
Be early to the next big token project
Alpha Points
NEW
Trade on-chain assets and enjoy airdrop rewards!
Futures Points
NEW
Earn futures points and claim airdrop rewards
Investment
Simple Earn
Earn interests with idle tokens
Auto-Invest
Auto-invest on a regular basis
Dual Investment
Buy low and sell high to take profits from price fluctuations
Soft Staking
Earn rewards with flexible staking
Crypto Loan
0 Fees
Pledge one crypto to borrow another
Lending Center
One-stop lending hub
VIP Wealth Hub
Customized wealth management empowers your assets growth
Private Wealth Management
Customized asset management to grow your digital assets
Quant Fund
Top asset management team helps you profit without hassle
Staking
Stake cryptos to earn in PoS products
Smart Leverage
NEW
No forced liquidation before maturity, worry-free leveraged gains
GUSD Minting
Use USDT/USDC to mint GUSD for treasury-level yields
More
Trending Topics
View More39.1K Popularity
72.64K Popularity
239.68K Popularity
16.22K Popularity
101.85K Popularity
Pin
The security research organization Zscaler ThreatLabz discovered three malicious npm packages disguised as Bitcoin-related libraries (bitcoin-main-lib, bitcoin-lib-js, bip40). Before being taken down, they were downloaded over 3,400 times and used to implant a remote control Trojan called NodeCordRAT. NodeCordRAT can steal Chrome login credentials, API tokens, and MetaMask wallet private keys/mnemonics, and it can be controlled via commands through a Discord server. The malware is activated through installation scripts without the developer's knowledge. Security teams warn that npm supply chain risks are still rising. (cryptopolitan)