Trade
Trading Type
Spot
Trade crypto freely
Alpha
Points
Get promising tokens in streamlined on-chain trading
Pre-Market
Trade new tokens before they are officially listed
Margin
Magnify your profit with leverage
Convert & Block Trading
0 Fees
Trade any size with no fees and no slippage
Leveraged Tokens
Get exposure to leveraged positions simply
Futures
Futures
Hundreds of contracts settled in USDT or BTC
Options
HOT
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Futures Kickoff
Get prepared for your futures trading
Futures Events
Participate in events to win generous rewards
Demo Trading
Use virtual funds to experience risk-free trading
Earn
Launch
Investment
Simple Earn
VIP
Earn interests with idle tokens
Auto-Invest
Auto-invest on a regular basis
Dual Investment
Buy low and sell high to take profits from price fluctuations
Quant Fund
VIP
Top asset management team helps you profit without hassle
Crypto Loan
0 Fees
Pledge one crypto to borrow another
Lending Center
One-Stop Lending Hub
VIP Wealth Hub
New
Customized wealth management empowers your assets growth
Private Wealth Management
Customized asset management to grow your digital assets
Staking
Stake cryptos to earn in PoS products
BTC Staking
HOT
Stake BTC and earn 10% APR
GUSD Minting
New
Use USDT/USDC to mint GUSD for treasury-level yields
Soft Staking
Earn rewards with flexible staking
More
- Trending TopicsView More
5.5K Popularity
232.9K Popularity
19.5K Popularity
2.1K Popularity
19.1K Popularity
- Hot Gate FunView More
- MC:$679KHolders:742
- MC:$1.2MHolders:117
- MC:$288.2KHolders:1816
- MC:$50KHolders:97066653
- MC:$47.6KHolders:554
GDOG
芝麻开门
GCAT
LUCKY
芝麻人生
Grafana Experiences Security Incident: Attackers Use Gato-X to Steal Signature Data
According to the Gate.io News bot, Wu Shuo reported that SlowMist's Chief Information Security Officer 23pds disclosed on social media that the Open Source data visualization tool Grafana recently encountered a security incident. Attackers used the Gato-X tool to steal confidential signatures and launched attacks on multiple code repositories using App tokens. According to 23pds's description, attackers successfully injected JavaScript code and obtained confidential information through carefully crafted branch names. This attack involved a Private Key of an application in a workflow.