GetChain News
中简 中繁 EN
GetChain News
Toggle sidebar

Online/Update

News linked to both this project and an event.

Chainlink Launches Connectivity Framework, 17 Banks Prepare for SWIFT Ledger Pilot

Odaily News: Chainlink announced on September 28 the launch of a connectivity framework that allows banks to connect to the SWIFT blockchain ledger through the Chainlink platform while retaining transaction signing keys. The framework coordinates institutional systems' interactions with the ledger via the Chainlink runtime environment, and banks adopting the self-signing model do not need to hand over authorization keys to Chainlink.The SWIFT ledger supports 24/7 tokenized deposit payments, with final settlement still completed through existing mechanisms such as real-time gross settlement. Seventeen banks from six continents, including ANZ, HSBC, Citi, Standard Chartered, and UBS, are preparing to conduct tokenized deposit pilots on the SWIFT ledger.

Ledger Ethereum App Version 1.22.1 Contains Transaction Replacement Vulnerability — Users May Review One Transaction While Signing Another

Odaily News: OneKey Anzen has reproduced the Ledger vulnerability and discovered that Ledger Ethereum app version 1.22.1 contains a transaction replacement vulnerability. When an affected user is attacked, the hardware screen still displays transaction A under review, but the device may sign transaction B, which the user never viewed. OneKey Anzen stated that the issue stems from a race condition between the transaction display logic and the underlying buffer, with the attack requiring the host side to already be compromised by a malicious DApp or intermediary software. Ledger's CTO previously responded that a fix had been rolled out approximately two weeks ago, and users simply needed to update the app. Public information shows that the official tag for version 1.22.2 on Ledger's GitHub appeared on August 24. Ledger's official website states that the issue has been fixed through app-level checksums and SDK-layer patches, with Ledger Secure SDK v26.6.1 released on August 21, and the related apps have been rebuilt and republished. Users need to update the app via Ledger Live — updating only the device firmware will not complete the fix. Ledger stated that there is currently no evidence that this vulnerability has been actively exploited.