Futures
Access hundreds of perpetual contracts
CFD
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Pre-IPOs
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Promotions
AI
Gate AI
Your all-in-one conversational AI partner
Gate AI Bot
Use Gate AI directly in your social App
GateClaw
Gate Blue Lobster, ready to go
Gate for AI Agent
AI infrastructure, Gate MCP, Skills, and CLI
Gate Skills Hub
10K+ Skills
From office tasks to trading, the all-in-one skill hub makes AI even more useful.
GateRouter
Smartly choose from 40+ AI models, with 0% extra fees
Axios Supply Chain Attack Aftermath: All Old Versions of OpenAI Mac Apps Will Stop Working Starting Tomorrow
CryptoWorld News reports that Axios states that, due to a supply chain attack, OpenAI’s macOS signing certificate will be officially revoked tomorrow (May 8). At that time, outdated versions of ChatGPT Desktop, Codex, Codex CLI, and Atlas that have not been updated will be unable to start.
This incident traces back to the npm supply chain attack on March 31. The attackers used stolen maintainer accounts to publish two malicious versions (1.14.1 and 0.30.4), injecting a fake dependency, plain-crypto-js, which led to the download of a remote access trojan (RAT) during installation and overwrote components across the macOS, Windows, and Linux platforms.
Microsoft attributes the attack to the North Korean hacker organization Sapphire Sleet.
OpenAI’s analysis believes the certificate was not successfully stolen, but certificates have already been rotated and OpenAI has worked with Apple to block notarization channels for the old certificates. So far, no user data leaks or system intrusions have been found, and passwords and API Key are also unaffected.
The root cause is a workflow configuration issue: when referencing dependencies, it used floating version tags rather than a fixed commit hash.