we hacked ledger. the @OneKey_Anzen team has successfully reproduced a transaction replacement attack against ledger ethereum app 1.22.1 in our lab. the bug is a race condition between the transaction display logic and the underlying transaction buffer. an attacker can overwrite the transaction waiting to be signed while the user is still reviewing a legitimate one. in simple terms: - you see transaction a on your ledger. - you approve transaction a. - your ledger can end up signing transaction b. - and you never see transaction b. to reproduce this, we built the 1.22.1 ELF ourselves, fixed the speculos reset 502 issue, and got the full attack flow working end to end. ledger fixed this in ethereum app 1.22.3. if you’re still on an older version, update it.

🌍 From Africa to APAC, new payment rails are taking shape. Albert Wong, SVP of OSL BizPay, will join a live webinar on LinkedIn with industry leaders from @Finternetasia, @AnzensOfficial, @moneyinmotion26 and @StableHunterAI to discuss stablecoin-based cross-border settlement and the future of the China-Africa payment corridor. 🗓️ Date: May 14 7:00–8:00 PM (HKT) Register now and join the conversation 👉 #OSLBizPay# #Stablecoins# #Payments# #CrossBorderPayments# #Africa# #APAC#

Looking for something to tune into this week? Whether you're into Standards, Development, Roundtable Talks or Governance, there’s something for everyone 👇 📅 Tue, Oct 27
• 15:00 UTC - Hard Fork Working Group (@IntersectMBO) 
• 16:00 UTC - CIP Editors Meeting (Cardano CIP Calendar • Robert Phair (@COSDpool) 
• 16:30 UTC - Cardano Governance Hour #12# (@NicolasC3rny with Steven Gaertner of @totofinance) 
• 16:30 UTC - DR Congo Cardano Community Call #6# (Goma Hub • @gomadrep) 📅 Thu, Oct 29
• 14:00 UTC - Roundtable Talk: CIP-113, What Programmable Tokens Mean for Regulated Assets (@CryptoJoe101, @DenicioBernier, @AnzensOfficial, Brale, Deploi) 📅 Fri, Oct 30
• 14:00 UTC - Developer Office Hours (@DarlisaGC) Want to find more events? Head over to the Luma pages: - -

It’s been a brutal year for the market, but we’re still investing heavily in product development and security. OneKey Pro 2 is out, and we have more hardware in the works. More on that soon. Our investment in security will be even higher this year than last. Our @OneKey_Anzen security lab’s research was accepted at Black Hat USA 2026. We’ve completed multiple rounds of firmware security audits for Pro 2, along with code reviews and hardening of SeedCard against fault injection and power loss attacks. We’re also continuing our work on open source, reproducible builds, independent third party audits, and security hardening across our software, firmware, and hardware supply chain. Following the establishment of our Anzen physical security lab, we’re preparing to deploy our own privately hosted AI models for security auditing and penetration testing by the end of this year. We want to find more vulnerabilities ourselves, before attackers do. Stay humble. Stay cautious. Never take security for granted. Security work is never finished, and we’ll keep doing it. I sincerely hope none of you ever have to deal with a hack.

For free subscribers: Democrats' Extreme and Center Wings, LA's Skid Row Nonprofit Failure, Green-lit Career Paths, Millennial Midlife Barbell, Cambridge Fraud Coverup and more! For paid subscribers: Complete Covenants Survey (14+ Proposals, Zero Activation Dates), Peter Todd's BIP-110 Code Review, PoW Change Rebased to Knots, Shutting Down, Boltz Warrant Canary Shutdown, Lightning Jamming Solution, ColdCard Disclosure Policy, MARA Slipstream Goes Public, Anzen Self-Custody Trilemma, RAM Sold Out Through 2027, Fed vs Warsh, Central Banks Hoarding Gold, Poland Passes Switzerland and more! #Bitcoin# Tech Talk #513#

China Aneng deployed 310 specialists​ from Beijing, Lhasa, Chengdu and Chongqing to the Gyirong Port debris-flow zone in the early hours today, with 120 units​ of gear, including multi-role drones, 3D laser scanners, life detectors, excavators, loaders.