hodler

6 Jun 2026, 14:51

Internet Computer (ICP) And Arweave (AR): With ICP Running New Hosting / Inference Pilots And AR Securing LLM Archive Deals, Do ICP And AR Become A “Compute + P...

The intersection of decentralized physical infrastructure networks (DePIN) and artificial intelligence (AI) has shifted from a speculative narrative to a battle over raw utility. The enterprise demand for trustless execution layers has birthed a compelling architectural thesis: pairing high-performance on-chain calculation with immutable, permanent storage arrays. Internet Computer (ICP) is positioning itself as the heavy-compute execution engine of this stack, aggressively launching new full-stack hosting and on-chain AI inference pilots. Concurrently, Arweave (AR) is defining the data preservation layer, securing high-profile archival deals to store massive, immutable Large Language Model (LLM) training datasets and historical dApp state records. Together, they represent a highly complementary "Compute + Permanent Storage" barbell strategy. However, looking at their 30-day technical ranges, both protocols are managing standard corrections and trading below their short-term averages. The upcoming months will determine whether their specialized environments can attract the persistent workloads required to break out as a unified core pair, or if they will remain niche alternatives under the massive market shadow of Ethereum Layer-2 rollups and Filecoin (FIL). Internet Computer (ICP): Compute‑Heavy L1 In Mid‑Range Source: tradingview Internet Computer 's 30-day structural profile reveals a classic "post-run consolidation" pattern. While it trades slightly below its short-term moving average, it remains well above its key 200-day baseline ($8.50), indicating a healthy macro structure that is digesting previous gains. The Fibonacci Map ($9.00 to $14.00): 23.6% Retracement: ~$10.18 38.2% Retracement: ~$10.91 50.0% Retracement: $11.50 61.8% Retracement: ~$12.09 Immediate Support: $10.18 to $10.91: ICP is currently trading at $11.00, sitting precisely at the upper boundary of this "healthy retrace" band, which aligns with the 38.2% Fibonacci support ($10.91). Preserving this zone on daily closes keeps the broader $9.00 to $14.00 move fully intact. $9.00 to $9.30: The 30-day swing low region. A daily close slipping beneath $9.00 would unwind the entire leg, indicating that the market is not yet willing to pay a premium for ICP's on-chain inference and enterprise hosting pilots. Immediate Resistance: $11.50 to $12.10: The primary trend-repair block. This zone clusters the 50% Fib ($11.50), the 30-day SMA ($11.50), and the 61.8% Fib ($12.09). ICP needs to clear and hold above this moving average cluster to shift its posture from sideways digestion back into an active uptrend. $13.50 to $14.00+: The local monthly high ceiling. Sustained daily closes above $14.00 represent the first clear signal of a brand-new "compute" expansion leg. TradingView Chart Setup: To track this range visually on a daily (1D) chart, apply Simple Moving Averages for the 30 and 200 periods, and plot a Fibonacci retracement tool from the $9.00 low to the $14.00 high. This highlights the $10.20–$12.10 macro pivot pocket and tracks how tightly price coils beneath its short-term mean. Arweave (AR): Permanent Storage Leg In Lower Half Of Its Range Source: tradingview Arweave 's technical chart is managing a deeper pullback than ICP's, pinning the asset into the lower half of its 30-day channel. While it trades beneath its short-term moving average, it maintains a safe distance above its long-term structural floor (200-day SMA at $19.00). The Fibonacci Map ($20.00 to $34.00): 23.6% Retracement: ~$23.30 38.2% Retracement: ~$25.35 50.0% Retracement: $27.00 61.8% Retracement: ~$28.65 Immediate Support: $23.30 to $24.00: AR's current close ($24.00) sits right at the top of this immediate support band, which contains the 23.6% Fibonacci level ($23.30). Holding this floor keeps the broader move from $20.00 to $34.00 alive as a normal corrective retracement. $20.00 to $20.50: The 30-day swing low. A breakdown and daily close below $20.00 completely unwinds the monthly structure, proving that near-term institutional LLM archive demand lacks the strength to hold AR's recent re-rating. Immediate Resistance: $25.35 to $27.00: The primary trend-repair barrier. This heavy block clusters the 38.2% Fib ($25.35), the 50% Fib ($27.00), and the overhead 30-day SMA (~$26.50). AR must reclaim and hold this entire zone to prove it is repairing its short-term trend. $28.65 to $34.00+: The 61.8% Fib up to the local high. Sustained closes above $34.00 require a visible acceleration in the demand for long-term, permanent storage of AI datasets and dApp records. TradingView Chart Setup: On a 1D timeframe overlay the 30 SMA and 200 SMA, and draw a Fibonacci retracement from the $20.00 swing low to the $34.00 swing high. This layout maps the exact boundaries of AR's lower-half consolidation and charts the distance it must climb to conquer its short-term average. Conclusion: Compute + Permanent Storage Core, Or Hidden In The Shadows? The technical structures illustrate two mature DePIN protocols resting above long-term structural baselines, with clear, actionable step-up bands. They Emerge as a Core Infrastructure Duo If: ICP successfully defends the $10.18–$10.91 pocket, spends more time trading above the $11.50–$12.10 resistance block, and pushes toward $14.00+ as its inference pilots evolve into recurring workloads and protocol fee generation. AR vigorously holds the $23.30–$24.00 support floor, reclaims the $25.35–$27.00 trend-repair zone, and targets $34.00+ supported by persistent byte storage growth from enterprise LLM archival agreements. The broader market explicitly couples them together in narrative and capital allocation ("Compute on ICP, permanently store datasets on Arweave") rather than treating them as isolated, alt-L1 experiments. They Stay Under the Shadow of Ethereum L2s and Filecoin If: ICP remains boxed beneath the $12.10 moving average resistance, spending the summer unproductively oscillating between $9.00 and $12.00. AR fails to conquer the $27.00 trend-repair zone, continuously getting faded back toward the $20.00 floor on short-term average rejections. The vast majority of smart-contract execution and AI workloads choose to remain on Ethereum L2 rollups or centralized clouds, while major data storage requirements default to Filecoin or traditional legacy storage centers. Final Verdict: The technical data confirms that ICP is "constructively mid-range" while AR is managing a "deeper but structurally intact pullback." While they form an excellent theoretical foundation for a decentralized AI computer and data stack, the charts do not yet show the persistent strength expected of an established pair. Whether they step into a dominant role over the coming weeks depends entirely on whether their next wave of enterprise pilots translates into persistent on-chain depth, data volume, and network fees. Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

6 Jun 2026, 04:16

IronWorm malware plants rootkit in Arweave ecosystem npm libraries

Attackers planted an infostealer inside 36 npm packages linked to the Arweave ecosystem. It targeted developer credentials, SSH keys, and Exodus crypto wallet files. Security firm JFrog traced the attack back to a compromised maintainer account. The malware is called IronWorm, and its built using Rust. It activates the moment a developer installs an npm package. Once running, it scans through the infected computer for 86 environment variables and 20 credential files, as JFrog’s research team found. It goes after AWS tokens, Anthropic and OpenAI API keys, npm authentication credentials, and crypto wallet data. Arweave project packages carry hidden Rust malware Attackers comproimised an npm account called “asteroiddao,” which belongs to the asteroid-dao GitHub group, part of the Arweave/WeaveDB decentralized database project. All packages associated with the “asteroiddao” account were republished within a short time, with each new version containing a 976 KB Linux file located in a tools/ directory. The file was set to run automatically through a preinstall hook in package.json , meaning it launched before npm even began installing anything. All a victim had to do was run npm install . JFrog’s team pulled the file apart and found it had been packed in a way designed to fool standard unpacking tools. Inside was a large Rust program that kept its strings encrypted individually, with each one locked separately, making analysis much harder. When those strings were finally decoded, they revealed GitHub API endpoints, paths to credential files, fake bot accounts linked to real GitHub user IDs, and templates for injecting malicious code into other package registries. A screenshot showing infected npm packages related to the Arweave ecosystem. Source: Jfrog . Stolen GitHub tokens let malware push commits and infect more repos After harvesting credentials, IronWorm used them to push commits into repositories the victim could access. Those commits planted the same malicious binary into other packages, which could then be published to npm and compromise the next developer in the chain. JFrog found 57 backdated malicious commits across nine GitHub organizations. The commits used the author name “claude” with the email [email protected] . Timestamps were forged to match each repository’s most recent legitimate commit. One appeared to date back 13 years, though GitHub Actions logs confirmed all pushes happened within a few days of discovery. The affected organizations included asteroid-dao, weavedb, ArweaveOasis, and several personal accounts associated with the developer “ocrybit.” IronWorm also deployed an eBPF kernel rootkit to hide on infected machines. Communications to its operator routed through the Tor network. The Rust compiler left the rootkit’s source code in the binary, an operational mistake that made analysis easier. One oddity is that the operator hardcoded their own cryptocurrency wallet recovery phrase into the malware. JFrog concluded this was a safeguard to prevent the stealer from exfiltrating the attacker’s own credentials during testing. Malware attacks keep hitting npm Application security firm Ox Security said that the attack was caught early, before it could spread to more packages on npm. The malicious versions were marked as deprecated within a day and most of the backdated commits were removed from GitHub shortly after. On May 14, hackers exploited an inactive maintainer account for node-ipc, a package with more than 822,000 weekly downloads. The exploit was accomplished by re-registering the maintainer’s expired email domain and resetting the npm password. Three compromised variants had credential stealing payloads aimed at over 90 categories of developer secrets. Security firms Endor Labs and StepSecurity identified a concurrent but distinct attack using JavaScript-based malware called binding.gyp, which performed similar registry poisoning and GitHub Actions infection during the same timeframe. Developers who installed any of the affected WeaveDB packages should rotate all credentials, check lock files for unexpected version changes, and enable two-factor authentication on npm and GitHub accounts. If you're reading this, you’re already ahead. Stay there with our newsletter .

26 May 2026, 22:25

Xreal CEO says smart glasses are finally ready — and his company is leading the charge

BitcoinWorld Xreal CEO says smart glasses are finally ready — and his company is leading the charge For years, smart glasses have been the tech industry’s most stubborn fantasy — a vision of computing that never quite materialized. But Chi Xu, founder and CEO of Xreal, a longtime partner of Google, believes the industry has finally turned a corner. Speaking with me at Google’s I/O conference in Mountain View last week, Xu argued that the pieces are now in place for smart glasses to become a practical, desirable product. The long, expensive road to a breakthrough The smart glasses sector has consumed billions in investment with little to show in return. Bulky frames, limited software, and a general lack of consumer appeal have plagued nearly every attempt. ‘Everybody’s losing money,’ Xu acknowledged. ‘That’s because it’s very hard, what we’re doing.’ But the landscape is shifting. Meta’s partnership with Ray-Ban in 2023 produced one of the first models to sell in meaningful volume, even if its Reality Labs division still operates at a significant loss. That signal, combined with shrinking hardware and improving software, has given Xu confidence that Xreal can become a leader in the space. Project Aura: Wired, but more capable Xreal’s latest effort, Project Aura, is a set of wired smart glasses with embedded OLED displays that allow users to watch high-resolution video directly within the frames. The glasses are tethered to a ‘puck’ — a phone-shaped mini-computer that powers the experience and fits into a pocket. While the wired design introduces some awkwardness, it enables a broader range of features, including an immersive Google Maps app, VR YouTube videos, and a hand-tracking painting app that creates holographic imagery visible only to the wearer. The company also promises games and basic web browsing, all controlled via hand tracking. From developer kits to commercial launch Currently, Project Aura is available only to developers. Xreal plans to launch the glasses commercially later this year. Xu envisions the device being used not just for entertainment — watching NBA games in holographic format, for example — but also for productivity. ‘You could go to a coffee shop and do some work,’ he said. The company is also preparing for an IPO expected before the end of 2026, though Xu declined to provide details. The path to profitability Xreal has been working to improve its financial footing. Xu noted that the company has been raising gross margins while reducing marketing and sales costs. ‘Next year is the year when we could actually break even,’ he said. If successful, that would mark a rare milestone in an industry known more for ambition than for profit. Why this matters now The smart glasses market has long been a story of potential without payoff. But with Meta validating consumer interest, Google deepening its hardware partnerships, and companies like Xreal focusing on practical, feature-rich designs, the industry may finally be approaching an inflection point. Whether Project Aura can deliver on its promises — and whether consumers will embrace a wired form factor — remains to be seen. But for the first time in years, the smart glasses dream looks a little more real. Conclusion Xreal’s Project Aura represents a calculated bet that the smart glasses industry is ready for prime time. With a commercial launch later this year, an IPO on the horizon, and a clear focus on profitability, the company is positioning itself as a serious contender in a space that has humbled many before it. Whether it succeeds will depend on execution, consumer adoption, and the continued evolution of both hardware and software. FAQs Q1: What is Project Aura? Project Aura is Xreal’s latest smart glasses model, featuring embedded OLED displays for high-resolution video, hand tracking, and a tethered mini-computer ‘puck’ that powers the experience. Q2: When will Project Aura be available to consumers? Currently available only to developers, the glasses are expected to launch commercially later in 2026. Q3: How does Xreal plan to become profitable? Xreal is raising gross margins while reducing marketing and sales costs. CEO Chi Xu expects the company to break even by 2027. This post Xreal CEO says smart glasses are finally ready — and his company is leading the charge first appeared on BitcoinWorld .