ChainCatcher report: ZCode, the AI coding tool under Zhipu (2513.HK), a leading Chinese large model company, is set to be officially open-sourced. Zhipu stated that this open-sourcing is the first step in addressing external concerns regarding ZCode’s data handling, and that future efforts will further transition ZCode toward full community governance, inviting the public to download, review, and contribute to code improvements. Zhipu has engaged the China Academy of Information and Communications Technology (CAICT) to conduct a security audit of ZCode, with a focus on verifying data retention practices; a continuous vulnerability reporting mechanism will also be established. According to CAICT’s technical evaluation, the zcode-prod Alibaba Cloud OSS bucket was confirmed to contain zero data; the ZCode v3.14.0 client has completed security remediation, with the Repo Wiki feature removed and the local repository snapshot generation and upload pathways severed. Following a review by NSFOCUS, it was confirmed that the relevant data objects and storage buckets have been permanently deleted. Zhipu again apologizes and urges continued public oversight. Previously, social media reports alleged that ZCode silently uploaded users’ coding development data without consent. On September 18, Zhipu issued a statement attributing the controversy to a default-enabled codebase indexing feature, clarifying that uploaded data was used solely for generating RepoWiki and then immediately destroyed; the company apologized to affected users and offered all ZCode users an additional weekly quota reset as compensation. On September 20, Zhipu’s MaaS platform announced that a “no data retention” feature would be launched soon.
ZCode to be open-sourced and undergo a security audit
ChaincatcherShare
Summary
ZCode, the AI coding tool from Zhipu (2513.HK), is set to be open-sourced and undergo a security audit. The company has engaged the China Academy of Information and Communications Technology to review its data handling practices. GreenMeng Technology confirmed the deletion of relevant data objects. Zhipu reaffirmed its commitment to transparency and invited public oversight. Recent concerns centered on unauthorized data uploads, which the company addressed by disabling the Repo Wiki feature. Open interest in altcoins to watch remains high amid ongoing developments.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.