ledger

According to CoinDesk, Ripple's stablecoin RLUSD has surpassed a market capitalization of $2 billion, becoming one of the fastest-growing projects in the stablecoin market. Data shows that the total issuance of RLUSD is currently around $2 billion, with approximately $963 million deployed on the XRP Ledger and about $1.1 billion issued on the Ethereum network.Ripple previously stated that RLUSD will combine with its global payment network to provide more efficient on-chain liquidity solutions for businesses and financial institutions.

According to Cointelegraph, digital asset infrastructure provider Taurus has integrated its tokenization and custody platform with Swift's blockchain-based ledger. Taurus stated in the announcement that its clients can make payments on this ledger using bank-issued tokenized deposits through the existing digital asset infrastructure.The first batch of client integrations is expected to go live in a few days, with the first distributed ledger transactions completed through the Taurus platform anticipated to occur within weeks. Swift announced in July this year that the ledger is available for preliminary use, with 17 banks from six continents preparing to pilot real-time transactions using tokenized deposits.Previously, Standard Chartered Bank and HSBC completed the first real-time cross-border transaction through this ledger, connecting their respective independent tokenized deposit systems. Swift's ledger acts as a coordinating layer, supporting 24/7 cross-border payments for tokenized deposits on participating banks' balance sheets and coordinating inter-institutional transfers through existing mechanisms (including real-time gross settlement systems) before final settlement.

In response to the recent rumors about "vulnerabilities in the Ledger Ethereum application," Ledger's Chief Technology Officer Charles Guillemet tweeted that there was indeed a bug related to a specific clearance process, which was discovered by Ledger's security team Donjon using AI vulnerability research tools.The vulnerability has been fixed and deployed two weeks ago. Users just need to keep the Ledger application updated to be protected.

According to CoinDesk, HSBC and Standard Chartered have completed the first real-time tokenized deposit transaction on the Swift blockchain ledger. This transaction marks progress for traditional financial institutions in utilizing blockchain technology to handle tokenized deposits, with both parties achieving real-time transfer and settlement of deposit tokens through Swift's distributed ledger infrastructure.As a global interbank messaging and clearing network, Swift is promoting the application of its blockchain ledger in tokenized asset and deposit scenarios to enhance the efficiency of cross-border and inter-institutional funds. As major international banks, the collaboration between HSBC and Standard Chartered demonstrates the feasibility of tokenized deposits in practical business, helping to explore further integration of traditional finance and blockchain infrastructure.

According to The Block, New York-listed fintech company Broadridge announced that its Distributed Ledger Repo (DLR) platform processed over $8 trillion in transactions in July, averaging about $365 billion per day, a year-on-year increase of 28%.DLR allows companies to use distributed ledger technology to settle repo transactions in existing trading and post-trading environments, enabling real-time financing and tokenized collateral liquidity. In addition, Broadridge also offers on-chain proxy voting and governance services, as well as digital asset infrastructure management.

According to on-chain detective Specter, the same attacker is running similar phishing activities targeting Ledger. The relevant screenshots were taken two days ago, and the sponsored advertisement has now been removed.As of now, these activities have stolen over 3 million dollars.

The latest software version 3.3.0 of the XRP Ledger (XRPL) introduces multiple upgrade proposals, among which the "Confidential Transfers" feature aims to provide higher privacy protection for institutional users, supporting the encryption of token balances and transfer amounts while maintaining visibility of account and token types. This feature is primarily targeted at Multi-Purpose Tokens (MPT) on the XRPL, with application scenarios including tokenized financial assets such as funds and bonds. Through cryptographic technologies like zero-knowledge proofs, the network can verify the validity of transactions without disclosing specific amounts.According to market news, the XRPL currently has approximately $1.38 billion in on-chain real-world assets (RWA), including about $845.7 million in RLUSD. In addition to RLUSD, there are over $530 million in tokenized assets on the XRPL, involving issuers such as Ondo, VERT Capital, Archax, and Société Générale. Besides Confidential Transfers, the XRPL 3.3.0 version also includes five proposals: Batch, Sponsor, Permission Delegation, and Dynamic MPT, which address institutional needs for batch transactions, fee payment, permission management, and dynamic adjustment of token attributes. However, these upgrades have not yet been officially launched and will need to gain over 80% support from trusted validation nodes on the XRPL for two consecutive weeks before activation. The market is paying attention to whether institutions like Aviva and Ondo, which have issued assets on the XRPL, will adopt this privacy feature.

The real-time cross-border capital flow platform OpenFX announced the acquisition of Global Ledger, with its founder Tyler McIntyre appointed as the head of banking. At the same time, it launched a multi-currency account service. McIntyre previously co-founded the new bank Novo, which serves over 300,000 businesses and is valued at over $700 million.The account allows customers to make payments in local currency, and companies can hold received funds directly without the need for immediate conversion. OpenFX has launched the USD account in its first phase, which can receive and send funds to over 100 countries through ACH, Fedwire, and SWIFT, and supports instant connection with stablecoins like USDC.

According to Decrypt, Ledger's Chief Technology Officer Charles Guillemet stated that the Coldcard vulnerability incident exposed weaknesses in hardware wallet random number generation and emphasized that AI is reshaping the cybersecurity offensive and defensive landscape. Guillemet pointed out that the security model of hardware wallets "lives or dies by random numbers," and this incident proved that in the most expensive way.Ledger stated that its hardware wallets were unaffected because their mnemonic phrases are generated by a hardware random number generator within a certified secure element, with no software fallback path, generating a complete 256-bit random number each time. Guillemet believes that open-source code, if not thoroughly reviewed, does not equate to security, and AI is enabling attackers to scan code and identify vulnerabilities at machine speed, requiring defenses to advance at the same speed, which relies on secure design, hardware, and mathematics. Guillemet suggested that users should understand how the random number generation of a hardware wallet works and whether it has been independently certified when choosing one.

According to CoinDesk, Jazzi Cooper, the head of RippleX products, stated on the X platform that the next version of the XRP Ledger, xrpld 3.3.0, will be released next week. This update will introduce five new features for validators: confidential MPT, batch transactions, permissioned delegation, fee delegation and reserves, and dynamic MPT.Among these, the amendments for batch transactions and permissioned delegation were previously withdrawn urgently due to serious vulnerabilities discovered by security researchers.She stated that the XRP Ledger is already capable of supporting tokenized assets on a large scale, and this upgrade will further promote the application of these assets in global transfer, trading, collateralization, and settlement scenarios.

Zilliqa stated that there is a serious random number generation vulnerability in the Zilliqa Ledger application, affecting the Schnorr signatures of native non-EVM Zilliqa transactions. Attackers can recover the signer's private key from the biased temporary random numbers using only publicly available on-chain data.Any account that has signed and broadcasted about 5 or more native transactions through the Zilliqa Ledger application should be considered compromised. Since the related signatures are permanently recorded on the chain, subsequent updates to the application cannot eliminate the risk, and the affected private keys must be deactivated. EVM transactions and development tools such as zilliqa-js, gozilliqa-sdk, and pyzil are not affected.The vulnerability arises from the application selecting the wrong 32 bytes when copying the random number, retaining 8 bytes of zero padding and losing 8 bytes of entropy, resulting in each random number having a maximum of 64 bits fixed to zero. Attackers can use 5 or more affected signatures to recover the private key within seconds using ordinary hardware. Zilliqa observed suspected active exploitation on July 19 and confirmed the root cause on July 21.Zilliqa has suspended native transactions to prevent further loss of funds and is preparing a revised application with Ledger. However, the revised version cannot protect the exposed keys, and affected users should not transfer assets on their own but wait for the official announcement of a coordinated disposal plan.

According to CoinDesk, hardware wallet company Ledger has launched an open-source toolkit called Ledger Agent Stack, which supports AI agents to interact with crypto wallets by reading balances, preparing transactions, and suggesting actions, with all transactions requiring user approval on Ledger hardware devices.Ledger stated that this release is the first step in its AI roadmap, aiming to integrate hardware-based security mechanisms into AI-driven crypto applications and to prevent autonomous agents from transferring funds or accessing sensitive credentials without human approval.

Bloomberg ETF analyst Eric Balchunas posted on the X platform that DTCC's digital conversion is taking place on HyperLedger Besu, which is DTCC's private network, as well as on the Canton public blockchain. This is part of DTCC's multi-chain strategy aimed at ensuring resilience, scalability, and selectivity.Additionally, DTCC currently holds over $114 trillion in securities, and its subsidiaries processed approximately $47 trillion in securities transactions last year.

Ledger announced the expansion of support for Celo, having integrated Celo's CIP-64 fee abstraction feature into Ledger Live. After the upgrade, users can pay on-chain transaction gas fees using 18 types of Celo native assets, without needing to use the native token CELO exclusively.The assets that can be used to pay gas include USDT, USDC, USDm, EURm, GBPm, JPYm, CADm, AUDm, CHFm, BRLm, NGNm, PHPm, COPm, KESm, ZARm, XOFm, GHSm, and WETH. CIP-64 is a core mechanism introduced by Celo in the July 2023 Gingerbread hard fork, allowing transaction fees to be paid directly with approved ERC-20 tokens.According to official disclosures, nearly half of the transactions on the Celo chain are currently settled with US dollar stablecoins instead of CELO for transaction fees. Ledger had previously supported the sending, receiving, and exchanging of CELO and Celo native stablecoins in Ledger Live as of December 2025.

Ledger researchers found that all Tangem hardware wallet cards' passwords can be reset through a laser attack.This attack requires physical contact with the device and approximately $250,000 worth of laboratory equipment, and the cards that are already in circulation cannot be patched to fix this issue.

Based on the x402 open standard, the HTTP native payment infrastructure PayGo officially announced the completion of strategic financing, with investors including United Overseas Bank (UOB), Signum Capital, and Ledger Capital.It is reported that PayGo is natively built on the ENI blockchain, with its core business providing account-free, subscription-free, and API Key-free request-level instant stablecoin (USDT/USDC) payment settlement services using the HTTP 402 "Payment Required" status code for APIs, AI entities, and the machine economy. PAYG is the governance token for the project.

According to official news, Swift announced that its blockchain-based ledger is ready, and 17 banks from six continents are preparing to pilot the use of tokenized deposits for 24/7 cross-border payment trials.The ledger provides a secure orchestration layer for participating banks, supporting them in issuing tokenized deposits on their own ledgers, enabling around-the-clock fund movement before final settlement through existing systems. Participating banks include ANZ, BNP Paribas, BNY Mellon, Citibank, DBS Bank, First Abu Dhabi Bank, FirstRand Bank, HSBC, Itaú Unibanco, Lloyds Bank, Mashreq Bank, MUFG, OCBC Bank, Standard Chartered, UBS Group, UOB, and Wells Fargo.

According to CoinDesk, the new version of the XRP Ledger server software v3.2.0 has been launched, aiming to reduce operational costs, enhance stability, and increase appeal to institutional users. Currently, about 43% of the approximately 833 active nodes are running the new version, while 51% are still using the old version v3.1.3. However, about 89% of the 35 validators in the default UNL have upgraded, reaching the required 80% threshold for activation.The security amendment fixCleanup3_2_0 associated with the software upgrade is still under independent voting, covering fixes and improvements for single-asset vaults, permissioned DEX, multi-purpose tokens, and lending protocols, with current support far below the software adoption rate. Ripple has voted in favor of this amendment, and validators that do not upgrade before the amendment is activated may face the risk of being cut off from the Ledger.

According to The Block, the Donjon security team under Ledger has bypassed the firmware verification mechanism of the TROPIC01 chip used in the Trezor Safe 7 through precise laser attacks in a laboratory environment, allowing unauthorized firmware to be loaded as long as the attacker possesses the physical device.Chip manufacturer Tropic Square further discovered that there are additional attack vectors in the MAC-and-Destroy security mechanism used for PIN verification on this chip, but details will not be disclosed until the enhanced version of the chip is launched at the end of 2026.Trezor stated that the PIN, mnemonic backup, and private keys have never been stored on a single chip, and they have notified partners, so ordinary users do not need to take action. Currently, the feasibility of attacks can be reduced by disabling the chip's MAINTENANCE mode.