ledger

Zilliqa stated that there is a serious random number generation vulnerability in the Zilliqa Ledger application, affecting the Schnorr signatures of native non-EVM Zilliqa transactions. Attackers can recover the signer's private key from the biased temporary random numbers using only publicly available on-chain data.Any account that has signed and broadcasted about 5 or more native transactions through the Zilliqa Ledger application should be considered compromised. Since the related signatures are permanently recorded on the chain, subsequent updates to the application cannot eliminate the risk, and the affected private keys must be deactivated. EVM transactions and development tools such as zilliqa-js, gozilliqa-sdk, and pyzil are not affected.The vulnerability arises from the application selecting the wrong 32 bytes when copying the random number, retaining 8 bytes of zero padding and losing 8 bytes of entropy, resulting in each random number having a maximum of 64 bits fixed to zero. Attackers can use 5 or more affected signatures to recover the private key within seconds using ordinary hardware. Zilliqa observed suspected active exploitation on July 19 and confirmed the root cause on July 21.Zilliqa has suspended native transactions to prevent further loss of funds and is preparing a revised application with Ledger. However, the revised version cannot protect the exposed keys, and affected users should not transfer assets on their own but wait for the official announcement of a coordinated disposal plan.

According to CoinDesk, hardware wallet company Ledger has launched an open-source toolkit called Ledger Agent Stack, which supports AI agents to interact with crypto wallets by reading balances, preparing transactions, and suggesting actions, with all transactions requiring user approval on Ledger hardware devices.Ledger stated that this release is the first step in its AI roadmap, aiming to integrate hardware-based security mechanisms into AI-driven crypto applications and to prevent autonomous agents from transferring funds or accessing sensitive credentials without human approval.

Bloomberg ETF analyst Eric Balchunas posted on the X platform that DTCC's digital conversion is taking place on HyperLedger Besu, which is DTCC's private network, as well as on the Canton public blockchain. This is part of DTCC's multi-chain strategy aimed at ensuring resilience, scalability, and selectivity.Additionally, DTCC currently holds over $114 trillion in securities, and its subsidiaries processed approximately $47 trillion in securities transactions last year.

Ledger announced the expansion of support for Celo, having integrated Celo's CIP-64 fee abstraction feature into Ledger Live. After the upgrade, users can pay on-chain transaction gas fees using 18 types of Celo native assets, without needing to use the native token CELO exclusively.The assets that can be used to pay gas include USDT, USDC, USDm, EURm, GBPm, JPYm, CADm, AUDm, CHFm, BRLm, NGNm, PHPm, COPm, KESm, ZARm, XOFm, GHSm, and WETH. CIP-64 is a core mechanism introduced by Celo in the July 2023 Gingerbread hard fork, allowing transaction fees to be paid directly with approved ERC-20 tokens.According to official disclosures, nearly half of the transactions on the Celo chain are currently settled with US dollar stablecoins instead of CELO for transaction fees. Ledger had previously supported the sending, receiving, and exchanging of CELO and Celo native stablecoins in Ledger Live as of December 2025.

Ledger researchers found that all Tangem hardware wallet cards' passwords can be reset through a laser attack.This attack requires physical contact with the device and approximately $250,000 worth of laboratory equipment, and the cards that are already in circulation cannot be patched to fix this issue.

Based on the x402 open standard, the HTTP native payment infrastructure PayGo officially announced the completion of strategic financing, with investors including United Overseas Bank (UOB), Signum Capital, and Ledger Capital.It is reported that PayGo is natively built on the ENI blockchain, with its core business providing account-free, subscription-free, and API Key-free request-level instant stablecoin (USDT/USDC) payment settlement services using the HTTP 402 "Payment Required" status code for APIs, AI entities, and the machine economy. PAYG is the governance token for the project.

According to official news, Swift announced that its blockchain-based ledger is ready, and 17 banks from six continents are preparing to pilot the use of tokenized deposits for 24/7 cross-border payment trials.The ledger provides a secure orchestration layer for participating banks, supporting them in issuing tokenized deposits on their own ledgers, enabling around-the-clock fund movement before final settlement through existing systems. Participating banks include ANZ, BNP Paribas, BNY Mellon, Citibank, DBS Bank, First Abu Dhabi Bank, FirstRand Bank, HSBC, Itaú Unibanco, Lloyds Bank, Mashreq Bank, MUFG, OCBC Bank, Standard Chartered, UBS Group, UOB, and Wells Fargo.

According to CoinDesk, the new version of the XRP Ledger server software v3.2.0 has been launched, aiming to reduce operational costs, enhance stability, and increase appeal to institutional users. Currently, about 43% of the approximately 833 active nodes are running the new version, while 51% are still using the old version v3.1.3. However, about 89% of the 35 validators in the default UNL have upgraded, reaching the required 80% threshold for activation.The security amendment fixCleanup3_2_0 associated with the software upgrade is still under independent voting, covering fixes and improvements for single-asset vaults, permissioned DEX, multi-purpose tokens, and lending protocols, with current support far below the software adoption rate. Ripple has voted in favor of this amendment, and validators that do not upgrade before the amendment is activated may face the risk of being cut off from the Ledger.

According to The Block, the Donjon security team under Ledger has bypassed the firmware verification mechanism of the TROPIC01 chip used in the Trezor Safe 7 through precise laser attacks in a laboratory environment, allowing unauthorized firmware to be loaded as long as the attacker possesses the physical device.Chip manufacturer Tropic Square further discovered that there are additional attack vectors in the MAC-and-Destroy security mechanism used for PIN verification on this chip, but details will not be disclosed until the enhanced version of the chip is launched at the end of 2026.Trezor stated that the PIN, mnemonic backup, and private keys have never been stored on a single chip, and they have notified partners, so ordinary users do not need to take action. Currently, the feasibility of attacks can be reduced by disabling the chip's MAINTENANCE mode.

According to CoinDesk, hardware wallet manufacturer Ledger has suspended its plans to go public in the U.S. due to unfavorable market conditions. Sources say that Ledger had discussions with investment banks such as Goldman Sachs, Jefferies, and Barclays about an IPO in the U.S. this year, with a potential valuation of around $4 billion, but has not yet submitted an S-1 registration document to the SEC. The company is evaluating other options, including private financing.The report points out that after several crypto companies go public in 2025, many institutions, including Kraken, have postponed their IPOs due to weakening token prices, declining trading volumes, and stock market volatility. Additionally, the only crypto-native company that went public in 2026, BitGo, has seen its stock price drop about 36% below its offering price.

Ripple officially announced its quantum resistance roadmap, with the core goal of making the XRP Ledger (XRPL) quantum-resistant by 2028. The roadmap primarily addresses the potential attack mode of "harvest now, decrypt later," where attackers collect encrypted data now and wait for future quantum computers to mature before cracking it.The entire plan will be implemented in four phases:Phase 1: Q-Day Emergency Preparedness (Already Started). Establish a Q-Day emergency response mechanism. If the existing classical encryption system is suddenly compromised, the network will immediately stop accepting traditional public key signatures, forcing a migration to quantum-safe accounts. At the same time, explore asset ownership verification solutions based on Post-Quantum ZK-proofs, allowing existing account holders to safely recover funds in emergencies without exposing vulnerable keys.Phase 2: Risk Assessment and Algorithm Testing (First Half of 2026). Conduct a comprehensive assessment of the impact of post-quantum cryptography on the performance, storage, and bandwidth of the XRP Ledger network. Collaborate with Project Eleven to conduct validator-level testing and Devnet benchmarking, deploy NIST standardized ML-DSA quantum-safe signature schemes, and develop prototypes for post-quantum custodial wallets. Core engineer Denis Angell has already deployed ML-DSA signatures on XRPL's AlphaNet.Phase 3: Devnet Hybrid Integration (Second Half of 2026). Parallel integration of candidate post-quantum signature schemes with existing elliptic curve signatures on the developer network (Devnet), allowing developers to test performance and system impacts without affecting the mainnet. At the same time, explore post-quantum zero-knowledge proof primitives and homomorphic encryption technologies for Confidential Transfers to enhance the privacy and compliance capabilities of tokenized real-world assets on XRPL.Phase 4: Full Mainnet Upgrade (Target 2028). Submit a formal protocol amendment, which will be fully enabled on the mainnet after being approved by validator votes, to implement native post-quantum cryptography. Focus on production-ready optimization: throughput tuning, validator reliability assurance, and coordinated migration of the ecosystem, ensuring a complete transition without affecting network speed and settlement finality.

According to Finance Feeds, Apple has confirmed that it has removed a fraudulent app impersonating Ledger Live self-custody wallet from the App Store after an on-chain investigation revealed that over 50 victims lost a total of $9.5 million in cryptocurrency within a week.Previously, on-chain detective ZachXBT disclosed that this counterfeit Ledger Live app was available from April 7 to April 13, 2026. The losses involved multiple blockchains, including Bitcoin, Ethereum, Solana, Tron, and Ripple.

XRP Ledger announced the integration of zero-knowledge infrastructure provider Boundless to support banks and asset management institutions in executing transactions on the public chain that balance privacy protection and compliance.According to reports, this solution can hide sensitive information such as transaction size, frequency, and counterparties, while still allowing regulatory agencies to conduct audits through selective disclosure and role-based access control, thus achieving a balance between privacy and compliance. This integration will support institutional scenarios such as cross-border B2B payments, fund and capital management, over-the-counter (OTC) trading, tokenized asset issuance, and on-chain trading and lending.Industry insiders believe that the contradiction between the transparency of public chains and the demand for privacy has always been a significant barrier to institutional adoption, and this solution aims to reduce the so-called "transparency tax." Meanwhile, competition in the privacy track continues to heat up. Technologies such as zero-knowledge proofs (ZK) and fully homomorphic encryption (FHE) are accelerating implementation, pushing privacy capabilities from optional features to underlying infrastructure. Data shows that the market size of tokenized assets has reached approximately $29.25 billion, with a monthly increase of about 7.9%.

According to on-chain analyst ZachXBT, a counterfeit Ledger Live application was launched on the Apple App Store, resulting in over 50 users' assets being stolen, with total losses amounting to approximately $9.5 million, involving various assets such as Bitcoin, EVM chain assets, TRON, Solana, and XRP.The stolen funds were subsequently transferred through more than 150 KuCoin deposit addresses and laundered using a centralized mixing service called AudiA6. Data shows that the largest single loss reached $3.23 million. The application has recently been removed by Apple.

American musician Garrett Dutton (stage name G. Love) lost 5.9 BTC, amounting to approximately $420,000, after downloading and using a fake Ledger wallet app from the App Store and entering his recovery phrase.On-chain analyst ZachXBT discovered that the attacker had laundered the stolen Bitcoin through the KuCoin platform. This incident once again exposes the security risks of counterfeit wallet applications and reminds users to be vigilant when downloading and using cryptocurrency-related apps, avoiding entering sensitive information through unofficial channels.

American Philadelphia musician G.Love posted on the X platform that during the process of changing computers and reconfiguring Ledger, he mistakenly downloaded a malicious counterfeit application from the Apple App Store, resulting in the theft of his retirement funds, with approximately 5.92 bitcoins transferred all at once.On-chain detective ZachXBT subsequently stated that he had traced the flow of the stolen funds and pointed out that the relevant assets had been laundered through the recharge addresses of a centralized exchange (CEX). ZachXBT also questioned the review mechanism of the Apple App Store, claiming that there is an issue that allows counterfeit applications to be listed on the Apple platform, further amplifying the security risks to user assets. The incident has once again sparked market concerns about wallet security and the application ecosystem review mechanism.

According to tracking data from the Web3 asset data platform RootData X, over the past 7 days, the largest digital asset exchange globally, Binance, has been the project with the most new followers among X (Twitter) top personalities. New influential figures on X who have followed this project include cryptocurrency trader Loomdart(@loomdart), Zeneca(@Zeneca), and crypto trader James Wynn(@JamesWynnReal).In addition, the projects with the most followers among X top personalities also include Axie Infinity, StarkWare, Ledger, and DeFi Pulse.

According to CoinDesk, SBI Ripple Asia has completed the development of a token issuance platform based on the XRP Ledger and has registered as a prepaid payment tool issuer in Japan. Corporate users can now issue tokenized payment tools through this platform.

According to Decrypt, the U.S. Attorney's Office for the District of Connecticut announced that it has recovered and seized over $600,000 in cryptocurrency after a Ledger hardware wallet user fell victim to a phishing scam, being lured into performing a so-called security check by a letter impersonating "Ledger Security and Compliance," resulting in approximately $234,000 in crypto assets being stolen.The FBI and state police tracked the flow of funds, successfully seizing about $600,000 in USDT and filing a civil forfeiture lawsuit, alleging that the source of the funds involved wire fraud and money laundering. It is reported that this is one of a series of phishing incidents targeting hardware wallet users, where scammers used physical mail letters featuring company logos, holograms, and QR codes to enhance the credibility of the fraud. Similar incidents have affected companies like Ledger and Trezor, accompanied by data breaches and vulnerabilities in third-party services, leading to ongoing phishing attacks.

Ledger's Chief Technology Officer Charles Guillemet stated that the attack method used in the Drift Protocol exploit is similar to the 2025 Bybit hacking incident, which is widely believed to be linked to North Korean hackers.Guillemet pointed out that this attack did not target any smart contracts; instead, the attackers infiltrated the devices of multi-signature signers over a long period, tricking them into approving malicious transactions. The signers may have always thought they were authorizing legitimate operations. He emphasized that the root of the problem lies in the lack of security at the personnel and operational levels, rather than in the code itself.