News linked to both this project and an event.
Ripple与XRP Ledger基金会（XRPLF）联合成立新组织XRP Asia，旨在推动亚太地区XRP Ledger（XRPL）生态发展，总部位于新加坡，由前Hedera基金会亚太及金融科技/支付业务负责人Sabrina Tachdjian领导，该组织将支持开发者培训、黑客松、合作伙伴计划、创业支持以及生态活动，并对接基础设施服务商、孵化及资助项目，以及连接投资者和生态合作伙伴。
Odaily News: Chainlink announced on September 28 the launch of a connectivity framework that allows banks to connect to the SWIFT blockchain ledger through the Chainlink platform while retaining transaction signing keys. The framework coordinates institutional systems' interactions with the ledger via the Chainlink runtime environment, and banks adopting the self-signing model do not need to hand over authorization keys to Chainlink.The SWIFT ledger supports 24/7 tokenized deposit payments, with final settlement still completed through existing mechanisms such as real-time gross settlement. Seventeen banks from six continents, including ANZ, HSBC, Citi, Standard Chartered, and UBS, are preparing to conduct tokenized deposit pilots on the SWIFT ledger.
XRP Ledger has released xrpld 3.4.1, fixing the batch feature issue and including broader stability improvements. Validators and node operators are encouraged to upgrade as soon as possible; developers stated that the issue did not affect the mainnet and caused no loss of funds.The new version introduces the fixBatchV1_2 amendment, with a default vote in favor and a current consensus rate of 94.29%. Both the amendment and the batch feature have entered the activation period. Previously, some validators changed their votes from in favor to against in order to reset the voting timer for the Batch amendment.
The XRP Ledger batch transaction upgrade countdown was reset due to insufficient validator support, delaying activation from September 29 to October 9. This marks the second attempt following a fix for a signature vulnerability.
Bitget CEO Gracy Chen posted a 12-hour progress report on the security incident on X, including:1. Affected assets include ETH, XRP (largest single-chain loss), BNB, AVAX, USDT, USDC, and other tokens. Affected chains include: Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. All on-chain cold wallets have been confirmed secure and unaffected.2. All foundations of the affected chains have been contacted, and some foundations have confirmed the freezing of the hacker's wallet addresses.3. Based on IP behavioral characteristics and on-chain analysis, the attack methodology is highly consistent with known patterns of North Korean hacker groups. Relevant authorities have been notified, and full cooperation is being provided for a global investigation.4. Bitget Wallet (decentralized wallet) operates completely independently from Bitget exchange infrastructure, and this incident has no impact on it. Bitget Wallet assets are completely safe.5. Transparent disclosure regarding the platform's financial status: In addition to over $464 million in protection funds (all held in publicly verifiable wallet addresses), Bitget's own assets exceed $1 billion. User funds are covered at a 1:1 ratio, and all data can be verified on-chain.6. Regarding withdrawal recovery timing: The goal is to achieve full recovery as soon as possible. Once a specific time window is confirmed, an announcement will be made immediately. No commitment will be made to timelines that cannot be fulfilled.
Odaily News: Ledger has partnered with Payward, the parent company of Kraken. Customers using Payward's stock trading platform xStocks can require counterparties to sign on their Ledger devices before completing transactions; Ledger devices will integrate xStocks functionality.
Odaily reports: IBM has announced the launch of a new ISO 20022 message adapter, enabling financial institutions to instruct tokenized deposits through standard payment messages; financial institutions participating in the Swift project have already used Digital Asset Haven to test tokenized deposits.The Swift shared ledger supports banks in issuing tokenized deposits and enables participating institutions to conduct 24/7 digital asset transfers and final settlement. IBM has also launched a beta version of an on-premises deployment of Digital Asset Haven that can run on IBM Z and LinuxONE, allowing customers to manage stablecoins, tokenized deposits, and other digital assets without relying on public clouds. The key management layer runs in the customer's own environment and is protected by IBM Crypto Express hardware security modules.
Oracle has announced the expansion of its Digital Assets Data Nexus platform, adding payment execution integration, configurable wallet and smart contract controls, as well as AI-driven transaction monitoring and risk analysis features.The upgrade supports connecting banks' existing payment systems with digital asset transaction execution through the ISO 20022 messaging standard, and plans to integrate Oracle Banking Payments and Swift Ledger, covering scenarios such as tokenized deposits, stablecoins, CBDCs, digital bonds, and real-world assets. The related features are planned for launch in fiscal year 2027.
Ripple stated that multiple asset management firms are preparing for the Batch V1.1 feature on the XRP Ledger. This upgrade aims to improve payment efficiency through atomic settlement and is expected to go live by the end of September.
Odaily reports: Bitcoin News posted on X platform that Sparrow Wallet has released version v2.5.5, adding stricter PSBT signature verification, Silent Payment output verification, and expanded support for BitBox02, Jade, Krux, Trezor, and Ledger hardware wallets.This version also strengthens Coldcard multisig import restrictions, improves chain reorganization handling mechanisms and Trezor debug log sensitive data protection, and adds a new system theme that can automatically follow the operating system's light or dark settings.
According to BIS Working Paper 1374 released by the Bank for International Settlements (BIS), the BIS, together with several researchers, has proposed a verifiable framework that binds official statistical data to the blockchain. The solution computes cryptographic fingerprints for SDMX datasets and anchors the digest values to the XRP Ledger, enabling independent verification of data provenance and integrity while leaving existing data publication workflows unaffected. Prototype tests show a data publication latency of approximately 3–5 seconds and a verification latency of approximately 1–2 seconds, meeting the requirements for real-time interactions and automated systems. Since only fingerprints, rather than raw data, are stored on-chain, data confidentiality is preserved. Cost modeling indicates that on-chain fees become negligible after batch processing, with a single ledger record capable of covering thousands of datasets. The study also provides an open-source reference implementation and reserves capacity for future integration of zero-knowledge proofs and AI-driven automated verification.
According to security firm Huntress, hackers are distributing credential-stealing malware to cryptocurrency users through forged Google Docs files, malicious files hosted on GitHub, and cloned Claude.ai pages. Attackers impersonate senior CoinDesk employees on the social platform X, luring victims into opening Google Docs documents containing malicious code under the guise of an online meeting invitation, which then prompts users to manually install the malicious software. Mac users face threats from Atomic macOS Stealer (AMOS), which can steal browser passwords, cryptocurrency wallet data, and Telegram files; Windows users are served fake Google API Connector updates that, once installed, deploy NetSupport RAT and counterfeit Ledger hardware wallet applications. Additionally, hackers have placed fraudulent ads on search engines like Bing to lure users to cloned Claude.ai pages where they execute malicious commands; the associated malware, MacSync and SectopRAT, can steal cookies, saved passwords, mnemonic phrases, and payment card information. Security firm Socket also concurrently identified 16 malicious extensions targeting Chrome and Edge, capable of draining EVM, Solana, and Tron wallet assets.
Ripple stated that it is developing a long-term upgrade plan for the XRP Ledger to address the threat of quantum computing, aiming to prevent future quantum computers from potentially breaking existing cryptographic mechanisms and exposing private keys. The plan consists of four phases, including assessing network risks, testing post-quantum cryptography solutions, running existing security mechanisms alongside post-quantum alternatives in parallel, and initiating a complete network migration when necessary.
Odaily News: OneKey Anzen has reproduced the Ledger vulnerability and discovered that Ledger Ethereum app version 1.22.1 contains a transaction replacement vulnerability. When an affected user is attacked, the hardware screen still displays transaction A under review, but the device may sign transaction B, which the user never viewed. OneKey Anzen stated that the issue stems from a race condition between the transaction display logic and the underlying buffer, with the attack requiring the host side to already be compromised by a malicious DApp or intermediary software. Ledger's CTO previously responded that a fix had been rolled out approximately two weeks ago, and users simply needed to update the app. Public information shows that the official tag for version 1.22.2 on Ledger's GitHub appeared on August 24. Ledger's official website states that the issue has been fixed through app-level checksums and SDK-layer patches, with Ledger Secure SDK v26.6.1 released on August 21, and the related apps have been rebuilt and republished. Users need to update the app via Ledger Live — updating only the device firmware will not complete the fix. Ledger stated that there is currently no evidence that this vulnerability has been actively exploited.
Odaily News: Sparrow Wallet v2.5.4 has been released following an extensive AI-assisted review, featuring multiple security hardening updates aimed at reducing users' reliance on external servers such as Electrum.Additionally, this version strengthens Ledger, Keycard, Trezor, Payjoin, PSBT, and multi-signature handling, removes Bitcoin Core credentials and other sensitive information from debug logs, restricts permissions for existing wallet and backup directories to owner-only access, closes residual local DNS resolution leaks when using Tor, and reinforces validation for wallet import, signing, downloads, and server responses. The update expands Sparrow Wallet's scope of independent verification for transaction data, hardware devices, and other inputs, reducing dependence on data provided by external servers. (Bitcoin News)
Odaily News: Ledger Chief Technology Officer Charles Guillemet stated that a smart contract security company recently claimed to have discovered a vulnerability in the Ledger Ethereum app. The Ledger Ethereum app did previously contain a vulnerability related to certain Clear Signing processes, but it was identified by Ledger's in-house security research team, Donjon, using an AI-driven vulnerability research tool, and was fixed and deployed two weeks ago. The security company in question only contacted Ledger's bug bounty program after the fix had already been completed, failing to follow responsible disclosure procedures and without communicating with the bug bounty team, then published content implying that the issue remained unresolved. Guillemet stated that users who promptly update their Ledger device firmware, Ledger apps, and related software will receive the latest security fixes.
Odaily News - Hardware wallet maker BitBox reports that credit card sales in August grew roughly 10x compared to the baseline of previous weeks, with the increase primarily driven by North America. Trezor and OneKey also confirmed rising sales during the same period, though neither disclosed specific figures.Trezor, BitBox, and OneKey have all re-reviewed their seed phrase generation, random number generator, entropy, and firmware verification processes. Trezor plans to conduct penetration testing on core firmware functions and publish related security audit reports. OneKey will strengthen reviews of security-critical code paths and transaction signing processes.Ledger CTO Charles Guillemet stated that AI-assisted attacks mean patch releases, vulnerability disclosures, and user education need to accelerate. Blockstream Jade has released a firmware update containing multiple fixes and recommends users simultaneously update their apps, operating systems, devices, routers, and home appliances. (Bitcoin.com News)
Odaily News - Ripple's stablecoin RLUSD has surpassed a $2 billion market cap, becoming one of the fastest-growing projects in the stablecoin market.Data shows that RLUSD's total issuance currently stands at approximately $2 billion, with about $963 million deployed on the XRP Ledger and approximately $1.1 billion issued on the Ethereum network. Ripple previously stated that RLUSD will integrate with its global payment network to provide enterprises and financial institutions with more efficient on-chain liquidity solutions. (CoinDesk)
Odaily News Digital asset infrastructure provider Taurus has connected its tokenization and custody platform to Swift's blockchain-based ledger, allowing clients to use bank-issued tokenized deposits for payments through their existing digital asset infrastructure.Taurus stated that the first client integrations are expected to go live within days, with the first distributed ledger technology transaction facilitated by its platform expected to be completed within weeks.International payment network Swift announced in July that its ledger was ready for initial use, with 17 banks from six continents piloting real-time transactions using tokenized deposits. Standard Chartered and HSBC have completed the first real-time cross-border transaction on the ledger. (Cointelegraph)
Odaily News: Standard Chartered and HSBC have completed the first real-time cross-border transaction executed via the Society for Worldwide Interbank Financial Telecommunication (SWIFT) blockchain ledger. The transaction exchanged payment messages through the SWIFT ledger, with the corresponding debts recorded respectively on HSBC's Tokenised Deposit Service and Standard Chartered's tokenised deposit infrastructure.The SWIFT ledger matches and nets off the debts of both parties before final settlement, with the ultimate settlement still completed through existing payment systems. The ledger is designed to connect tokenised deposits issued across different banking infrastructures, supporting round-the-clock cross-border payments while retaining existing settlement, compliance, and risk control mechanisms. (Cointelegraph)