News linked to both this project and an event.
Odaily News: European electronics retailer MediaMarkt's parent company MediaMarktSaturn has removed all Ledger products from its stores and online platform, stating that it is in contact with the manufacturer. The company said it takes this matter very seriously.X user Johannes claims that two Ledger wallets purchased from two different MediaMarkt stores both contained unauthorized cables and cellular modules. Ledger stated that the implants in question can transmit users' recovery phrases via cellular networks and is investigating reports beyond CryptoBilis.Former Mt. Gox CEO Mark Karpelès said that a Ledger Flex he purchased at Singapore Changi Airport contained a spy implant. Ledger responded by saying users should refer to the latest CryptoBilis investigation update, but did not directly address the Singapore case, nor did it confirm whether tampered devices exist in Europe. (Cointelegraph)
former Mt. Gox CEO Mark Karpelès has publicly confirmed that a Ledger Flex purchased at Metapod in Singapore Changi Airport had a spy module implanted inside it. The device was bought by user Ben Yorke this summer and had never been used before being sent in for teardown due to suspicious scratches on its casing. Photos and videos of the teardown released by Karpelès show an additional circuit board and wiring hidden at the bottom of the device. It is a relatively new version of the implant, capable of eavesdropping on screen communications and other methods to steal users' seed phrases during setup. Previously, Ledger devices purchased through the Malaysian distributor CryptoBilis were also found to have been implanted, leading to the theft of over $86 million in assets. Devices purchased from official European distributors and in the Philippines have also been gradually discovered to show similar signs of implantation. The implants have progressively evolved from early hand-soldered modifications to more covert mass-produced circuit boards.
Standard Chartered Bank has officially announced support for institutional custody services for Ripple USD (RLUSD) issued on the XRP Ledger (XRPL). The service is offered through Standard Chartered Bank's DIFC branch and is regulated by the Dubai Financial Services Authority (DFSA). Concurrently, Standard Chartered Bank is partnering with Ripple and LMAX Group to incorporate RLUSD into LMAX Group's eligible collateral framework for its products. Through Standard Chartered Bank's collateral mirroring model, institutional clients can flexibly deploy digital assets for trading without directly transferring RLUSD to the trading venue, thereby reducing transfer operational risks, optimizing counterparty exposure, and enhancing capital efficiency. The aforementioned functionalities will go live only after final document execution, testing, and compliance approvals are completed.
Odaily Report: On-chain detective ZachXBT retweeted the XRP Ledger Foundation's explanation regarding a previous critical security vulnerability and criticized its bug bounty mechanism.ZachXBT stated that XRPL, which holds billions of dollars in assets, only paid a $250,000 reward to the white hat hacker who discovered the critical vulnerability. He believes that this level of reward could weaken security researchers' incentive to proactively report vulnerabilities, and may even encourage attackers to exploit vulnerabilities for massive gains rather than responsibly disclosing the issue.Previously, the XRP Ledger Foundation confirmed that the vulnerability could theoretically bypass the XRP total supply limit, but no additional XRP was found to have been created as a result, and the vulnerability has been fixed through version 3.4.1.
OneKey founder Yishi posted on X platform that in response to recent incidents where Ledger hardware wallets purchased by some users through CryptoBilis were found to have unauthorized hardware implanted, leading to asset theft, OneKey has not yet received any reports of its own users experiencing asset theft as a result. However, out of security concerns, OneKey has terminated CryptoBilis's authorized dealer status.OneKey also announced that it will immediately stop accepting new dealers and will re-conduct qualification reviews for all existing authorized dealers. Additionally, for users who purchased OneKey hardware wallets through CryptoBilis between March 1, 2026 and the date of this statement, regardless of device model or usage status, they may apply for a free replacement. The application deadline is December 31, 2026.Furthermore, Yishi advised users who have already used the affected devices to treat their original seed phrases as potentially compromised and to transfer their assets to wallets using new seed phrases as soon as possible, without waiting for replacement devices to arrive.
According to official statements, hardware wallet manufacturer Ledger has released a 72-hour update regarding the security incident involving Southeast Asian distributor CryptoBilis. Ledger stated that it is currently cooperating with relevant law enforcement agencies, noting that the number of affected devices is limited and that its internal systems and official direct sales channels remain unaffected. To date, all confirmed cases linked to the disclosed fund theft incidents involve devices sold through distributor CryptoBilis; CryptoBilis has confirmed that it has ceased sales of all hardware wallets.
Odaily News: The XRP Ledger Foundation posted on the X platform to clarify the recent XRP Ledger security vulnerability incident, stating that the vulnerability could potentially have been used to bypass the limit that fixes XRP's total supply at 100 billion, but it was fixed two weeks ago via version 3.4.1. Furthermore, upon verification, no new XRP was found to have been created, and the total amount of XRP currently circulating on the ledger is approximately 99.986 billion.The Foundation stated that the vulnerability would have required hundreds of deliberately constructed operations to trigger, and normal payment transactions would almost never involve it. In the future, it will strengthen formal verification, AI adversarial testing, security research collaboration, and bug bounty programs with RippleX and the community. Regarding the fix process, the Foundation explained that publicly releasing a patch could allow attackers to use AI to accelerate vulnerability analysis. To address this situation, the XRPL community engaged in coordination. Participating parties including the XRP Ledger Foundation, RippleX, core developers, and validators reached a social consensus and agreed to adopt the approach of directly releasing the fix. In addition, version 3.4.1 only became a version the network was required to adopt after going through the normal amendment voting process and receiving support from more than 80% of validators for two consecutive weeks. Protocol changes still need to be completed through the amendment mechanism.Previously, RippleX engineering lead J. Ayo Akinyele also posted on the X platform, stating that he attaches great importance to the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine. This vulnerability is a serious security issue that has existed in the codebase for more than 10 years and could theoretically lead to the over-creation of XRP, breaking through the fixed supply cap. However, before the vulnerability could be exploited, it was discovered by the security research firm Veria AI through Ripple's bug bounty program.
Odaily reports, according to monitoring by Bitcoin News, @0xJohannes stated that a Ledger hardware wallet purchased from an official European reseller several weeks ago was found to contain an unauthorized spy implant device. Suspicious wiring not present in genuine Ledger hardware was discovered inside the device, indicating it may have been physically tampered with before being sold. The implant appears to be an older version, as newer versions typically conceal the components behind the screen. Funds in the affected device have not been stolen thus far. Suspected cases have currently been reported in Asia, South America, and Europe. If the original secure element remains intact, Ledger's Genuine Check software cannot detect unauthorized physical modifications.
Odaily News: Crypto analyst Darkfost posted that following the security incident involving Ledger reseller CryptoBilis, other potentially related reseller names have emerged in community discussions, including some Lazada merchants.Darkfost stated that the full scope of the incident remains difficult to confirm. Although Ledger has confirmed a connection to the CryptoBilis incident, it is still unclear whether CryptoBilis is the only affected reseller. He compiled a list of potentially risky Ledger resellers, noting that due to their regional proximity, there is a possibility that their supply chains were compromised simultaneously. However, Darkfost emphasized that these assessments are speculative and have not yet been confirmed.Darkfost advised that if users have purchased Ledger devices from the relevant resellers within the past 6 months, they may consider moving their assets to other secure devices before the investigation concludes. He also noted that users can refer to a guide published by security researcher MagicalTux to check their Ledger devices for signs of tampering.
Odaily News: J. Ayo Akinyele, Engineering Lead at RippleX, posted on X platform stating that they take the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine very seriously. The vulnerability is a severe security issue that has existed in the codebase for over 10 years and could theoretically lead to the over-creation of XRP, breaching the fixed supply cap. However, the vulnerability was discovered by security research firm Veria AI through Ripple's bug bounty program before it could be exploited.J. Ayo Akinyele further added that the Ripple team quickly developed and tested a fix, working closely with validator nodes to complete the network upgrade, and patched the vulnerability before its public disclosure. Currently, AI is changing the speed of vulnerability discovery, and XRPL needs to further enhance its security response capabilities. RippleX will strengthen its bug bounty program, expand AI-assisted vulnerability hunting and adversarial testing, review long-standing code in the payment engine, consensus mechanism, and P2P network, while advancing formal verification of critical modules and reducing potential risks through systematic security hardening. The goal is not just to fix a single vulnerability, but to identify and eliminate potential risks in XRPL's legacy code, making the network more difficult to attack.
The official Ledger support account (@Ledger_Support) announced that Ledger has confirmed an unauthorized hardware implant in one affected user's device, and has already contacted the user to conduct an investigation. Reseller CryptoBilis has suspended all hardware wallet sales until the investigation concludes. Ledger is working with relevant law enforcement agencies to identify those responsible and thanks @SEAL_911 for their assistance. Ledger emphasized that its own security infrastructure, systems, and services remain unaffected, and advises users who purchased devices from CryptoBilis as follows: if setup is incomplete, do not power them on yet; if setup is complete, consider migrating your assets to a new device created with a fresh seed phrase. Ledger reminds users to rely solely on official channels for information and reiterates that it will never ask for users' 24-word seed phrases.
Odaily News: OneKey founder Yishi posted a statement saying that the recent asset loss incidents involving Ledger users have drawn community attention to the security of hardware wallets. The risk may not come from the secure chip itself, but rather from the gap between the protected chip and the display screen that users trust — the so-called "last centimeter." Hardware wallet security needs to cover the entire process of production, transportation, storage, and distribution. Users are advised to purchase devices through official channels, complete packaging inspections and official verification, as sensitive data may be exposed during transmission.Yishi stated that as of October 10, OneKey has not received any reports of user fund losses caused by this incident. In response to supply chain attack risks, the company plans to make improvements across multiple areas, including packaging, mnemonic phrase display pathways, motherboard communication, reseller authorization, and user verification information. Among these, OneKey will introduce a backup process that does not require displaying the mnemonic phrase on the device screen, and will prioritize strengthening encryption of sensitive internal communication links on the motherboard to reduce the risk of hardware implant attacks obtaining recovery phrases.
The XRP Ledger recently patched a critical security vulnerability traceable to 2015. Discovered by researcher Cayden Liao and Veria AI, the issue was reported internally on September 22. Attackers could exploit a counter overflow flaw in the ledger’s built-in exchange to create massive amounts of XRP from thin air at an extremely low cost by opening hundreds of accounts, then transfer and liquidate them to bypass XRP’s fixed supply cap of 100 billion. RippleX quietly released the patched version xrpld 3.4.1 on September 25, stating that there is currently no evidence of the public network having been exploited.
Ledger issued an official statement announcing that it is investigating user fund loss incidents linked to distributors in Southeast Asia, and warns potentially affected users.
XRP Ledger has activated its permission delegation feature, allowing enterprises to assign specific on-chain operational permissions to independent accounts without handing over their master account keys.This feature is designed to enhance security and operational flexibility for institutions in scenarios such as stablecoin issuance and custody, enabling enterprises to authorize different accounts to carry out routine on-chain tasks while retaining control of their master keys. (CoinDesk)
According to Decrypt, Ledger announced at the TOKEN2049 conference in Singapore the launch of its self-custody lending feature, "Crypto Loan". Eligible users can borrow stablecoins USDC or USDT through their wallet application by using wrapped Bitcoin (cbBTC or wBTC) as collateral, without transferring funds to centralized lending platforms or selling the underlying assets.
Odaily reports: Hardware wallet company Ledger announced at TOKEN2049 in Singapore the launch of a self-custodial lending feature within its wallet app called Crypto Loan. Eligible users can use cbBTC or wBTC as collateral to borrow USDC or USDT.Users can open and manage loans directly within Ledger Wallet, track loan-to-value ratios, add collateral, repay loans, or increase borrowing. Key operations must be confirmed via hardware on a Ledger signing device before execution.The feature is powered by decentralized credit network Morpho, with Yield.xyz as the technology service provider. Ledger also announced that its signing devices can connect directly to Morpho without the need for browser extensions or software wallet connection protocols.Crypto Loan has begun rolling out to eligible users, with broader coverage to follow. If the price of collateral assets drops significantly, the related collateral may be subject to forced liquidation. (Decrypt)
Ripple与XRP Ledger基金会（XRPLF）联合成立新组织XRP Asia，旨在推动亚太地区XRP Ledger（XRPL）生态发展，总部位于新加坡，由前Hedera基金会亚太及金融科技/支付业务负责人Sabrina Tachdjian领导，该组织将支持开发者培训、黑客松、合作伙伴计划、创业支持以及生态活动，并对接基础设施服务商、孵化及资助项目，以及连接投资者和生态合作伙伴。
Odaily News: Chainlink announced on September 28 the launch of a connectivity framework that allows banks to connect to the SWIFT blockchain ledger through the Chainlink platform while retaining transaction signing keys. The framework coordinates institutional systems' interactions with the ledger via the Chainlink runtime environment, and banks adopting the self-signing model do not need to hand over authorization keys to Chainlink.The SWIFT ledger supports 24/7 tokenized deposit payments, with final settlement still completed through existing mechanisms such as real-time gross settlement. Seventeen banks from six continents, including ANZ, HSBC, Citi, Standard Chartered, and UBS, are preparing to conduct tokenized deposit pilots on the SWIFT ledger.
XRP Ledger has released xrpld 3.4.1, fixing the batch feature issue and including broader stability improvements. Validators and node operators are encouraged to upgrade as soon as possible; developers stated that the issue did not affect the mainnet and caused no loss of funds.The new version introduces the fixBatchV1_2 amendment, with a default vote in favor and a current consensus rate of 94.29%. Both the amendment and the batch feature have entered the activation period. Previously, some validators changed their votes from in favor to against in order to reset the voting timer for the Batch amendment.