News Heat Trend
Project Overview
Anzen is a decentralized lending platform built by a team of credit investment experts to bring stability to the DeFi space and enable more use cases for stablecoins. Users can lend on the platform to earn yield backed by Real World Assets (RWA). Loans are collateralized with secure, tangible, and value-accruing assets — offering lenders a predictable income stream tied to the performance of RWA.
Chainlink Launches Connectivity Framework, 17 Banks Prepare for SWIFT Ledger Pilot
Odaily News: Chainlink announced on September 28 the launch of a connectivity framework that allows banks to connect to the SWIFT blockchain ledger through the Chainlink platform while retaining transaction signing keys. The framework coordinates institutional systems' interactions with the ledger via the Chainlink runtime environment, and banks adopting the self-signing model do not need to hand over authorization keys to Chainlink.The SWIFT ledger supports 24/7 tokenized deposit payments, with final settlement still completed through existing mechanisms such as real-time gross settlement. Seventeen banks from six continents, including ANZ, HSBC, Citi, Standard Chartered, and UBS, are preparing to conduct tokenized deposit pilots on the SWIFT ledger.
Ledger Ethereum App Version 1.22.1 Contains Transaction Replacement Vulnerability — Users May Review One Transaction While Signing Another
Odaily News: OneKey Anzen has reproduced the Ledger vulnerability and discovered that Ledger Ethereum app version 1.22.1 contains a transaction replacement vulnerability. When an affected user is attacked, the hardware screen still displays transaction A under review, but the device may sign transaction B, which the user never viewed. OneKey Anzen stated that the issue stems from a race condition between the transaction display logic and the underlying buffer, with the attack requiring the host side to already be compromised by a malicious DApp or intermediary software. Ledger's CTO previously responded that a fix had been rolled out approximately two weeks ago, and users simply needed to update the app. Public information shows that the official tag for version 1.22.2 on Ledger's GitHub appeared on August 24. Ledger's official website states that the issue has been fixed through app-level checksums and SDK-layer patches, with Ledger Secure SDK v26.6.1 released on August 21, and the related apps have been rebuilt and republished. Users need to update the app via Ledger Live — updating only the device firmware will not complete the fix. Ledger stated that there is currently no evidence that this vulnerability has been actively exploited.
Related news
Chainlink Launches Connectivity Framework, 17 Banks Prepare for SWIFT Ledger Pilot
Odaily News: Chainlink announced on September 28 the launch of a connectivity framework that allows banks to connect to the SWIFT blockchain ledger through the Chainlink platform while retaining transaction signing keys. The framework coordinates institutional systems' interactions with the ledger via the Chainlink runtime environment, and banks adopting the self-signing model do not need to hand over authorization keys to Chainlink.The SWIFT ledger supports 24/7 tokenized deposit payments, with final settlement still completed through existing mechanisms such as real-time gross settlement. Seventeen banks from six continents, including ANZ, HSBC, Citi, Standard Chartered, and UBS, are preparing to conduct tokenized deposit pilots on the SWIFT ledger.
Ledger Ethereum App Version 1.22.1 Contains Transaction Replacement Vulnerability — Users May Review One Transaction While Signing Another
Odaily News: OneKey Anzen has reproduced the Ledger vulnerability and discovered that Ledger Ethereum app version 1.22.1 contains a transaction replacement vulnerability. When an affected user is attacked, the hardware screen still displays transaction A under review, but the device may sign transaction B, which the user never viewed. OneKey Anzen stated that the issue stems from a race condition between the transaction display logic and the underlying buffer, with the attack requiring the host side to already be compromised by a malicious DApp or intermediary software. Ledger's CTO previously responded that a fix had been rolled out approximately two weeks ago, and users simply needed to update the app. Public information shows that the official tag for version 1.22.2 on Ledger's GitHub appeared on August 24. Ledger's official website states that the issue has been fixed through app-level checksums and SDK-layer patches, with Ledger Secure SDK v26.6.1 released on August 21, and the related apps have been rebuilt and republished. Users need to update the app via Ledger Live — updating only the device firmware will not complete the fix. Ledger stated that there is currently no evidence that this vulnerability has been actively exploited.
Alphabet Issues Bonds in Australia for First Time, Plans to Raise $3.6 Billion to Support AI Spending
According to Bloomberg, Google's parent company Alphabet launched its inaugural Australian dollar bond issuance on August 18, planning to raise approximately 5 billion Australian dollars (approximately 3.6 billion US dollars), with the funds raised to be used to address continuously rising AI infrastructure expenditures. The issuance is underwritten by institutions including Australia and New Zealand Banking Group (ANZ), offering Australian dollar notes with four maturities, with the longest maturity reaching 20 years.