Banks and financial regulators from Europe, the Middle East and Asia joined a cross regional pilot testing post quantum security for digital asset wallets and blockchain transfers on Aug. 24.

The Responsible Fintech Institute convened the project with digital asset custody infrastructure provider Safeheron as its technology partner, according to the official announcement.

Bison Bank and DK Bank will test wallet creation and onchain transfers in a shared application environment. Abu Dhabi Global Market, Bhutan’s Gelephu Financial Services Office and the Malta Financial Services Authority will initially participate as observers.

The pilot does not mean that quantum computers can presently compromise the participating banks or the NEAR network. It is a preparedness exercise intended to test how financial institutions could adopt new signature standards before sufficiently powerful quantum computers become available.

Banks will test ML-DSA-65 signatures on NEAR

Safeheron developed a multiparty computation protocol supporting ML-DSA-65, one of the parameter sets contained in the U.S. National Institute of Standards and Technology’s FIPS 204 standard.

NIST finalized the standard in August 2024. The agency says ML-DSA is believed to remain secure against an adversary possessing a large scale quantum computer. However, the standard’s security depends on correct implementation and continued cryptographic review.

Multiparty computation allows several parties or devices to participate in signing a transaction without reconstructing a complete private key in one location. The pilot combines that custody model with post quantum signatures intended to resist future attacks.

Testing will cover wallet generation and transfers on a quantum resistant NEAR testnet. The organizers have not identified the assets involved, transaction volumes, testing schedule or performance measures.

The exercise does not involve the public NEAR mainnet or customer funds. Results from a controlled testnet also cannot by themselves establish that the system is ready for live institutional use.

Regulators will examine governance after observing tests

Regulators will observe the technical work during the first phase rather than execute transfers themselves. Their participation levels will vary depending on each institution’s mandate and jurisdiction.

A later governance workstream will examine operational resilience, oversight and cross border interoperability. The initiative could help participants assess how post quantum wallet infrastructure fits existing custody, cybersecurity and risk management requirements.

“No single bank, vendor, or regulator solves this alone,” Responsible Fintech Institute Chairman Chia Hock Lai said. He described the project as an effort to produce a shared security and compliance reference.

Safeheron said it eventually intends to release the protocol as open source software, allowing independent researchers to examine the implementation. The organizers also plan to publish a white paper covering the research, protocol design and test findings.

Neither the white paper nor the software release has a confirmed publication date. Until both become available, outside researchers cannot independently assess the protocol’s implementation, performance or security assumptions.

Financial authorities are preparing for quantum migration

The Bank for International Settlements warned in a July 2025 roadmap that migration to post quantum systems cannot be treated as a simple algorithm replacement.

Banks must identify where existing cryptography is used, assess third party dependencies and prepare systems that can switch between cryptographic methods. The BIS recommended coordinated planning, layered defenses, hybrid systems and phased migration.

Hong Kong is already measuring progress. As previously reported, its banking sector scored 2.3 out of 10 for quantum preparedness, while 32% of surveyed banks had not begun preparing. The Hong Kong Monetary Authority wants the sector fully prepared by 2030.

Blockchain developers are also testing network level changes. In related coverage, the Algorand Foundation set a 2027 target for broad quantum resilience covering accounts, wallets, validator tools and consensus.

Bitcoin developers have proposed new transaction formats designed to protect future funds from quantum attacks. However, moving existing holdings into quantum resistant outputs would require broad coordination across users, wallets, exchanges and custodians.

The bank pilot’s next milestones are the completion of wallet and transfer testing, the governance review, publication of the white paper and release of the underlying code. Those materials will show whether the system can offer practical performance alongside its intended security properties.

The Bank of Russia has opened a new domestic testing route for individuals seeking qualified investor status, a change that could let more Russians access higher cryptocurrency purchase limits under the country’s new regulated market framework.

The Bank of Russia said individuals will be able to qualify by passing a special financial-market knowledge test and presenting an approved Russian certificate, with the new rules taking effect on Aug. 31.

Under the updated requirements, successful applicants can use a Qualifin Certificate issued by the National Finance Association or a MOEX Investor Certificate from the Moscow Exchange. The regulator will also accept a Financial Analyst Certificate from the NFA and an Investment Adviser Certificate from the National Association of Securities Market Participants.

Possession of any one of the approved certificates will be enough for a broker or management company to recognize an individual as a qualified investor, the central bank said.

Bank of Russia qualified investor rules add a knowledge-based route

Previously, investors relying on educational credentials had to present international certifications covering fields such as financial analysis, investment consulting, asset management or risk management. The Bank of Russia cited the CFA designation as one example of the credentials accepted under the earlier system.

The domestic test adds another route without removing the existing qualification criteria. According to the regulator, individuals can still receive qualified status based on income over the previous two years, minimum asset holdings, relevant securities-market work experience, independent investing experience, a relevant degree or a permitted combination of criteria.

Deputy Governor Mikhail Mamuta said the test would make access to qualified investor status “more accessible and deliberate,” allowing people to qualify through demonstrated knowledge instead of relying only on large account balances or high income.

Mamuta said increasing the number of qualified investors on paper was not the regulator’s objective. “The actual level of their knowledge is much more important than this number,” he said.

The central bank wants investors to understand the risks attached to complex financial instruments before entering the market, Mamuta added.

Qualified investor status carries higher crypto purchase limits

The timing puts the qualification change alongside Russia’s newly adopted crypto framework, which separates cryptocurrency access according to investor status.

A July 21 crypto.news report said Russia’s State Duma had passed crypto market rules covering regulated exchanges, brokers, custodians and other intermediaries, while placing the Bank of Russia in charge of market supervision.

Under the framework, non-qualified investors can purchase up to 300,000 rubles, roughly $3,800, in approved cryptocurrencies each year through a single regulated intermediary. Qualified retail investors receive a limit ten times higher, allowing annual purchases of up to 3 million rubles under the rules described during the bill’s passage.

Before the final votes, lawmakers had retained the 300,000-ruble retail ceiling while changing other parts of the legislation. A revised crypto bill approved by a State Duma committee in July removed a proposed requirement for holders to disclose their cryptocurrency wallet addresses.

The revised version instead focused reporting requirements on information including balances and transaction volumes. It also allowed crypto to be used to purchase Russian securities and digital financial assets, while certain large transfers abroad or to third parties could be delayed for up to two days, according to the July report.

Earlier proposals had already tied retail participation to knowledge requirements. During the bill’s first reading in April, lawmakers backed a system requiring non-qualified investors to use licensed intermediaries and restricting them to cryptocurrencies deemed sufficiently liquid by the central bank.

The first-reading framework also treated cryptocurrency as property while maintaining Russia’s ban on using digital assets for domestic payments. Companies were permitted to use crypto for cross-border transactions, with the legislation creating a separate legal route for foreign trade.

Russian banks prepare for regulated crypto access

Major Russian lenders have started preparing services around the regulated market as the legal framework moves toward implementation.

Sberbank plans to launch crypto trading infrastructure and a digital depository by Dec. 1, according to a July report on its planned crypto launch. The planned system would cover trading, custody, settlement and depository services for eligible clients.

The same report said Russia’s new crypto framework was scheduled to begin on Sept. 1, while market participants would have until July 1, 2027, to meet licensing requirements. Non-qualified investors would remain subject to the 300,000-ruble annual purchase ceiling and a mandatory knowledge test before buying approved crypto assets.

Alfa-Bank has also tested cryptocurrency trading inside its Alfa-Investments brokerage app with a limited group of qualified investors. The bank has said a larger rollout depends on the Bank of Russia completing the required regulatory acts, while its plans include a digital depository and crypto-to-ruble exchange gateways.

Alfa-Bank expects a full retail launch closer to the fourth quarter of 2026 if the regulatory timetable permits, while Dmitry Vitman, chief operating officer of its corporate and investment business, said substantial liquidity in Russia’s regulated crypto market may not emerge before late 2027.

Pakistan’s crypto regulatory authority, the Pakistan’s Virtual Assets Regulatory Authority (PVARA), has opened a licensing portal and started enforcing a framework for exchanges and other virtual asset service providers (VASPs). The move turns Pakistan’s virtual-asset regime from a largely legislative exercise into an operational compliance system—creating a clear deadline for firms already serving users in the country.

Under PVARA’s stated rules, businesses providing virtual asset services on or before March 5 must apply for a no-objection certificate (NOC) by Sept. 5. PVARA warns that operating after the deadline without filing an application will be treated as an offense, according to a Saturday press release reported by the Associated Press of Pakistan. PVARA also said the licensing window is designed to establish standards for consumer protection, governance, compliance, and market integrity.

Key takeaways

• PVARA has opened its licensing portal, shifting Pakistan’s virtual-asset policy into enforcement mode.
• Existing VASPs serving before March 5 must seek an NOC by Sept. 5 or face regulatory action.
• The framework sets requirements that include segregation of customer holdings and restrictions on lending or pledging them without written consent.
• Firms may pursue licensing via a regulatory sandbox or an NOC pathway tied to incorporation plans in Pakistan.
• Pakistan’s approach builds on earlier legal steps, including the Virtual Assets Act and bank-account rules for licensed providers.

From framework to enforcement: the licensing deadline

For market participants, the most immediate change is timeline clarity. PVARA’s licensing website outlines the operational expectations for VASPs already active in Pakistan. Companies that have been providing virtual asset services on or before March 5 are required to submit an application for an NOC by Sept. 5. If they continue operating without applying, PVARA says it will treat that as an offense.

While this does not necessarily mean all noncompliant businesses will be shut down instantly, it does set up a compliance gate that operators must clear. For traders and users, licensing timelines can influence platform availability, withdrawal processing, and counterparty risk. For businesses, the deadline effectively turns “watch-and-wait” posture into a project with legal, technical, and governance deadlines attached.

Scope of covered services and “two-route” licensing

PVARA’s framework is broad. It covers core parts of the virtual-asset industry, including exchanges, custody, broker-dealer services, lending, derivatives, asset management, token issuance, and mining-related services. That breadth matters because it signals that Pakistan’s regulatory intent is not limited to a single type of business model; it aims to govern multiple layers of the value chain from issuance to market infrastructure.

The authority also described two paths to licensing. Firms can apply for an NOC prior to incorporating locally, or they can enter a regulatory sandbox to test products under PVARA supervision before pursuing a full license. According to PVARA, these routes are designed to accommodate companies at different stages of market entry—those that are preparing to establish a local entity and those that want to pilot products while working through compliance expectations.

This two-route model is especially relevant for companies exploring new offerings like derivatives or lending, where consumer protection, operational resilience, and risk controls typically require more extensive systems work than a basic exchange front-end.

Operational and compliance requirements for licensed providers

PVARA’s notified requirements emphasize custody discipline and broader institutional controls. Among the explicit obligations mentioned in the framework are rules requiring licensed providers to keep customer holdings separate from their own assets. PVARA also states that firms cannot lend or pledge customer holdings without written consent, a clause designed to reduce the risk of customer funds being used for the provider’s own balance sheet activities.

Beyond asset-handling, PVARA’s framework points to governance and conduct expectations, along with detailed operational and security requirements. The rules reference cybersecurity, operational resilience, and anti-money laundering and counter-terrorism financing controls. In practical terms, these categories are often where regulators assess whether a platform can sustain continuity, protect user data and assets, and meet compliance obligations consistently—not just at launch, but as ongoing operational processes.

The compliance emphasis is consistent with what PVARA described when it previously issued NOCs to certain firms, allowing them to set up local subsidiaries and prepare for full licensing applications. In other words, the licensing portal appears to formalize a staged approach: preliminary permission to move toward local incorporation and detailed readiness, followed by the deeper compliance requirements that accompany full authorization.

How Pakistan’s legal groundwork enabled the licensing rollout

PVARA’s licensing process builds on earlier steps that set the regulator’s authority and operational structure. Pakistan’s parliament passed the Virtual Assets Act in March, establishing PVARA as the statutory regulator for the sector. After that, the State Bank of Pakistan allowed banks to provide accounts to licensed VASPs, including arrangements such as segregated client-money accounts. Those banking rules are important because they can reduce settlement and custodial friction while also strengthening accountability for how customer funds are handled.

PVARA’s enforcement rollout also followed public consultation, with consultations held from June 11 to July 2. The authority said the final framework provides two licensing pathways—reflecting feedback incorporated into the end product rather than a purely top-down rulemaking.

Notably, the move comes after PVARA had already issued NOCs to some firms. According to coverage earlier in the year, NOCs were issued to Binance and HTX in December 2025, permitting them to establish local subsidiaries and prepare applications for full licensing. With the regulations now notified and the licensing portal open, those preliminary steps can progress into more complete authorization planning under PVARA’s detailed requirements.

For compliance teams, this is where projects become concrete: companies with NOCs still need to align their custody setup, governance, cybersecurity posture, and AML/CFT systems with the framework’s expectations—and do so inside the enforcement timelines now linked to the Sept. 5 NOC application deadline for existing providers.

What to watch next

With PVARA now accepting applications through its licensing portal, the next critical signals will be how quickly NOC applications are processed and whether PVARA’s sandbox pathway launches smoothly for new product testing. Market participants and users should also watch for any enforcement actions tied to the Sept. 5 deadline, since those outcomes will define how strictly the regulator draws the line between compliant, transitioning, and noncompliant operations.

Stablecoin neobank Fasset raised $68 million in a Series C funding round led by Japan’s SBI Group, reaching a private valuation of $1 billion on Aug. 24.

The financing follows the company’s $51 million Series B round in May. Fasset has now raised $119 million during 2026 as it expands stablecoin payment, banking and settlement services across emerging markets.

Early investor Speedinvest and other strategic investors participated in the latest round, according to the report. Speedinvest’s updated portfolio also identifies the financing as a $68 million Series C led by SBI.

The $1 billion valuation was established through the private funding transaction. It is not a public market valuation, and Fasset did not disclose the equity stake sold, the round’s full investor list or other financial terms.

Fasset funding reaches $119 million in 2026

Fasset previously raised $51 million to expand regulated banking services in May. SBI, Investcorp, Arz Portföy and strategic family offices participated in that round.

The company said at the time that it processed more than $32 billion in annualized transaction volume. Fasset now puts that figure above $40 billion, indicating that the annualized pace has increased by at least $8 billion since May.

Fasset co-founder and CEO Mohammad Raafi Hossain said revenue has grown approximately sixfold from the previous year. He also said the company has remained profitable for 12 consecutive months.

Those figures are management claims. Fasset did not disclose its revenue, profit or audited financial statements, preventing an independent assessment of its margins or the earnings supporting its valuation.

Revenue currently comes from institutional and retail services, including stablecoin payments and settlement. Hossain said cards and bank accounts are beginning to provide additional income, although Fasset did not provide a breakdown by product.

Stablecoins operate behind Fasset’s banking products

Fasset allows consumers and businesses to hold, send, spend and invest across currencies and assets. Stablecoins can provide the settlement rail even when customers interact with traditional bank accounts, cards or local currencies.

“Customers interact with stablecoins at many different points on our platform,” Hossain said. “They might be moving between a bank account, a payment product, a currency or another asset, while stablecoins provide the settlement rail underneath.”

The company operates Own Network, an AI enabled Ethereum layer 2 built using Arbitrum technology. Fasset says the network connects banks, telecommunications companies, payment firms, liquidity providers and other institutions across more than 100 banking corridors.

Own Network uses artificial intelligence to select payment routes, currencies, liquidity sources and settlement methods based on cost, speed and availability. The company plans to direct part of the new capital toward expanding those routing systems.

Fasset holds regulatory approvals in markets including the UAE, Indonesia, Malaysia, the European Union, Türkiye and Pakistan. Its services and available products vary by jurisdiction.

SBI brings Japanese payments and regulatory reach

The investment deepens a relationship established before the Series C. Fasset and SBI Remit previously combined their infrastructure for international stablecoin payments covering remittances, business payments and treasury settlement.

SBI Remit said in June that its network supported cash payouts at approximately 350,000 locations across more than 200 countries and territories. Hossain now puts its reach at about 470,000 locations, suggesting the network has expanded, although SBI has not published a matching updated figure.

Fasset expects to work with other businesses in SBI’s portfolio. The Japanese group’s digital asset interests include Ripple, Circle, blockchain company R3 and crypto liquidity provider B2C2.

“Together, we want to connect more corridors and financial rails across Japan, Asia and other emerging markets,” Hossain said.

The companies have not named the first new products, countries or deployment dates associated with the investment. Any expansion will depend on local licensing, banking partnerships and customer access requirements.

What comes next for Fasset

Fasset plans to use the capital to expand Own Network, develop its AI routing systems and connect additional financial institutions. Cards, bank accounts, lending and trade finance could also become larger parts of its revenue mix.

The company must still show whether rapid transaction growth produces durable earnings. Stablecoin payment providers face competition from banks, card networks and other fintech companies, while the cost of converting between stablecoins and local currencies can reduce expected savings.

A recent Bank of Italy test found that conversion and access fees pushed some stablecoin remittance costs toward 9%. Fasset’s ability to secure local banking corridors and liquidity will therefore be central to its effort to lower costs.

The next verifiable updates should include specific SBI linked products, additional corridor launches and new regulatory approvals. More detailed financial disclosures would also provide clearer evidence supporting Fasset’s $1 billion valuation and profitability claims.

Bitcoin has posted its largest dollar-denominated weekly gain on record, adding $14,264 to close at $77,387 as Strive CEO Matt Cole predicts the next Bitcoin cycle could be its strongest yet.

Bitcoin has gained roughly 22.7% over seven days, according to crypto.news price data, with the rally accelerating after the U.S. Treasury Department expanded its government bond buyback program and spot Bitcoin exchange-traded funds recorded their strongest weekly inflows since October 2025.

Cole, chairman and CEO of Bitcoin treasury company Strive, said Bitcoin’s recent performance against both the U.S. dollar and gold has strengthened his view that the cryptocurrency is entering a new cycle backed by macro conditions it has not experienced before.

“Bitcoin priced in gold is reinforcing my view that the next Bitcoin cycle will be the strongest we have ever seen,” Cole wrote in an X post.

His forecast follows a sharp change in market sentiment. The Crypto Fear & Greed Index climbed to 78, putting it close to the “extreme greed” category and at its highest level since December 2024.

Bitcoin ETF inflows add to renewed demand

Institutional demand returned alongside the price recovery, with U.S. spot Bitcoin ETFs recording $1.92 billion in total net inflows during the trading week ended Aug. 21, according to SoSoValue data.

The weekly total was the highest since October 2025, when Bitcoin was still trading around the peak of its previous bull cycle.

Bitcoin’s latest move began after Treasury Secretary Scott Bessent announced on Aug. 19 that the Treasury would increase the maximum size of its liquidity-support bond buybacks for longer-dated securities from $2 billion to at least $4 billion per operation.

The expanded program, covering parts of the 10-to-30-year maturity range, is scheduled to begin in September. Long-term Treasury yields initially fell following the announcement, while the dollar weakened and Bitcoin, gold and equities moved higher.

For Cole, dollar weakness forms one part of his longer-term Bitcoin forecast. He expects the U.S. dollar to enter a sustained period of weakness and argues that Bitcoin has never operated through such a macro environment.

A second factor comes from what he described as a “growing hunt for scarcity in an AI-driven world of abundance.”

As artificial intelligence makes intelligence, software and other capabilities cheaper and easier to reproduce, Cole expects investors to place a higher premium on assets whose supply cannot be easily expanded. He placed Bitcoin alongside gold and silver within that category.

“Capital will increasingly place a premium on forms of scarcity that cannot be manufactured away,” Cole said.

Bitcoin-gold breakout strengthens Cole’s cycle call

Bitcoin’s performance against gold forms another part of Cole’s argument. The Bitcoin-to-gold ratio has risen to 16.73 ounces of gold per Bitcoin, its highest level since May, according to Longtermtrends data cited by The Block.

Cole said the ratio has previously provided an earlier signal of changes in Bitcoin’s market cycle than its dollar price.

Bitcoin peaked against gold in December 2024, almost a year before its dollar-denominated peak in October 2025, according to his analysis. While BTC continued setting new highs against the dollar during that period, its relative performance against gold had already weakened.

A similar sequence occurred around the latest lows. Cole said Bitcoin bottomed against gold in February 2026, about five months before BTC reached its dollar-denominated bottom in July.

“What makes this week particularly interesting is that Bitcoin has now broken out against both the dollar and gold. The breakout has been explosive,” he said.

Cole expects relative performance to play an important role in deciding where new capital enters the scarcity trade. If Bitcoin continues outperforming gold while investment into scarce assets increases, he believes BTC could take a larger portion of those flows.

“When Bitcoin is the fastest horse, it will attract a disproportionate share of that capital,” he added.

Bitcoin’s store-of-value role has also remained part of institutional research despite weaker conditions earlier this year. In June, Bernstein said Bitcoin had attracted roughly $12 billion in combined ETF and corporate treasury inflows during 2026, even as spot ETF investors had withdrawn a net $2.6 billion at the time.

Bernstein attributed much of that demand to corporate treasury buyers and said institutional ownership continued to support Bitcoin’s long-term store-of-value case.

Strive has kept adding Bitcoin during the downturn

Cole’s bullish forecast comes after Strive continued accumulating Bitcoin while prices were under pressure earlier this year.

As crypto.news previously reported in June, Strive purchased 2,500 BTC between May 23 and June 1 for approximately $185.2 million, paying an average of about $74,092 per coin.

The purchase lifted its holdings to 19,000 BTC at the time, while cash and cash equivalents increased to $137.3 million from $93.3 million. The company also reported no short-term or long-term debt.

Later that month, Strive added another 759 BTC for roughly $50 million, raising its holdings to 19,864 BTC. The coins were purchased between June 15 and June 21 at an average price of approximately $65,850, including fees and expenses.

Cole said in his latest post that Strive continued buying Bitcoin during the bear market, including purchases made almost every week during the months before the latest breakout.

The company has structured its balance sheet around what it calls Bitcoin amplification, seeking to increase Bitcoin exposure per share while avoiding debt, margin requirements and financing arrangements that could trigger forced liquidations.

Earlier in June, Strive expanded its fundraising plans by $4.2 billion through proposed increases to its ASST and SATA at-the-market programs, with $2.1 billion allocated to each program for additional capital capacity.

Cole said the company considers being too conservative a potential risk if Bitcoin performs as expected, arguing that waiting for future business cash flows to purchase BTC could result in acquiring fewer coins at higher prices.

Cole expects dips to attract aggressive buying

Despite his longer-term forecast, Cole acknowledged that Bitcoin could retrace after its rapid weekly advance.

“A meaningful retracement from here would not surprise me, but it may not happen at all,” he said.

If a pullback develops, Cole expects buyers to enter aggressively and said his conviction that Bitcoin’s bear market has ended remains “very strong.”

His outlook covers the next 12 to 18 months while extending the underlying scarcity thesis over several years. Cole expects a weaker dollar, continued monetary debasement and demand for assets with fixed or difficult-to-expand supplies to direct more capital toward scarce monetary assets.

Strive’s CEO said Bitcoin’s combination of absolute scarcity, global liquidity, portability and around-the-clock settlement gives it characteristics that differ from gold, which has thousands of years of monetary history.

“That setup has me more bullish on Bitcoin today than I have ever been,” Cole said.

Ledger fixed a vulnerability affecting certain clear signing flows in its Ethereum application before another security company disclosed the issue publicly, Chief Technology Officer Charles Guillemet said on Aug. 23.

Guillemet said Ledger Donjon, the company’s internal security research team, discovered the bug using an artificial intelligence vulnerability research system. Ledger deployed the fix approximately two weeks before his statement, according to his post.

Users with current Ledger firmware and applications are protected, Guillemet said. No independently verified reports of funds stolen through this specific vulnerability had emerged by Aug. 24.

Ledger Ethereum app bug affected clear signing

Clear signing is intended to show transaction details in a readable format on a Ledger device before the user approves them. It allows users to check amounts, addresses and smart contract actions instead of authorizing an unreadable transaction hash.

TestMachine, the security company behind the Azimuth artificial intelligence research tool, said the vulnerability could undermine this review process. According to the company’s public thread, a malicious application could allegedly send a competing command while a user was still reviewing the original transaction.

The reported issue involved Application Protocol Data Unit communication between the connected application and Ledger’s Ethereum app. TestMachine claimed this could let an attacker replace an expected transaction with another action before the user completed approval.

Under that scenario, a device could display one transaction while preparing another for signing. One possible result described by researchers involved replacing a limited transaction with a broader token approval.

Ledger acknowledged that a bug existed in “certain clear signing flows.” However, Guillemet did not publish a detailed technical description, affected version list or security advisory explaining the full attack requirements.

Ledger and TestMachine dispute the disclosure timeline

TestMachine said its Azimuth system found the issue during an autonomous scan and validated it on a Ledger Flex. The company also claimed that shared code made other models potentially relevant, including Nano X, Nano S Plus, Stax and Apex devices.

Those statements remain the company’s account of its research. A complete public proof of concept demonstrating fund theft across every named device was not available at publication time.

Guillemet disputed how the disclosure was presented. He said TestMachine contacted Ledger’s bounty program after the company had already shipped its fix. He further alleged that the researchers did not discuss the issue with Ledger’s bounty team before publishing claims that suggested it remained unresolved.

“It was fixed and deployed two weeks ago,” Guillemet said. He described claims that the problem remained active as “manufacturing fear for attention.” TestMachine, by contrast, said it shared and verified the finding with Ledger but declined a bounty.

Ledger’s public Ethereum application repository shows several security-related changes during August. These include fixes involving signing states, application context handling and message finalization. The available records do not clearly identify which change corresponds to the disclosed clear signing issue or confirm the precise deployment date across Ledger’s device application store.

Users should update firmware and the Ethereum app

Ledger users should update the Ledger Wallet software, device firmware and installed Ethereum application. Updating only the desktop or mobile interface may not replace an outdated application running on the hardware device.

Users should also verify transaction details directly on the secure device screen. Ledger’s guide warns that blind signing remains risky because the device cannot present every smart contract action in a readable format.

As previously reported, Ethereum introduced human readable transaction summaries through the ERC-7730 standard. Ledger helped develop the system before stewardship moved to the Ethereum Foundation.

The latest incident differs from the previously reported Zilliqa signing flaw that exposed private keys. Zilliqa said that vulnerability affected its own native Ledger application and could not be corrected for keys already exposed through recorded signatures.

Ledger has not announced any compensation process, emergency transaction suspension or asset migration related to the Ethereum app issue. Further confirmation would require a technical advisory naming the affected versions, patched release and precise conditions needed to exploit the flaw.