Stellar Ecosystem
News

Nethermind optimized Noir UltraHonk verification for Soroban by moving cryptographic operations from guest WASM to Protocol 25/26 native host functions. The result: 64% reduction in CPU instructions, verification fees cut from 0.23 to 0.09 XLM, and shielded-pool applications now feasible.

Institutional finance requires privacy on-chain: traders can't broadcast positions, strategies, or counterparties without inviting front-running. OpenZeppelin examines three approaches—private permissioned networks like Canton, confidential tokens using FHE or zero-knowledge proofs, and privacy overlays on existing chains—each with different tradeoffs in complexity, composability, and regulatory auditability.

DFNS introduces Transaction Screening, which catches address poisoning attacks before transfers. Address poisoning exploits wallet copy-paste: attackers generate lookalike addresses matching visible characters, then plant them in transaction history via dust transfers. A Carnegie Mellon study found 270 million such attacks draining $83.8 million, often targeting institutional wallets. DFNS's lookalike detection flags addresses with matching visible prefixes or suffixes, informed by Carnegie Mellon research. The feature scopes per wallet, warns without blocking, and keeps repeat destinations unaffected.

Blux provides dApp infrastructure for Stellar builders, bundling multi-wallet support, email/passkey/social authentication, Stellar transaction hooks, customizable UI components, and analytics. The goal is to let developers focus on building their product rather than rebuilding the infrastructure around it.

Allium launches dashboard tracking real-world asset tokenization and stablecoin volume on Stellar. The tool isolates genuine economic activity from infrastructure transfers using adjusted metrics, providing transparency into RWA growth across the ecosystem.

Stellar Wave 7 introduces an appeal process for rejected repository applications, cuts app loading times substantially on slower connections through frontend optimization, and improves the issue review bot to better assess CI failures. The update also includes 2.8x faster test transactions and unified support channels via a new status page.

SDF publishes security standards for Stellar DeFi protocols, defining audit, disclosure, risk management, and governance requirements as the ecosystem scales from experimental to production. The standards include audits before user funds, bug bounties, capital buffers, and emergency pause controls, reflecting practices mature DeFi teams already use elsewhere, adapted for Stellar.

Freighter 5.43.0 ships token swaps with inline trustline creation, a customizable auto-lock timer, and encrypted mobile tab previews. The browser and mobile wallet also restores smart contract transaction signing, fixes transaction history for muxed addresses, brings federated addresses ([email protected]) back to mobile, and improves token pricing reliability.

The x402 Foundation, a Linux Foundation-affiliated initiative stewarding an open payment standard for AI agents, announces organizational progress: AWS's Alin Dragos as board chair, a technical steering committee, and an active executive director search. Premier members including Stellar, Visa, Mastercard, Stripe, and Google aim to enable seamless micropayments between AI agents, users, and machines without subscriptions or manual payment entry.

SDF publishes a guide to onchain monitoring as essential operational practice for smart contract builders. Using threat modeling to identify what to watch, monitoring platforms keep protocols safe in production.

Stellar Raven is an MCP server that aggregates Stellar documentation, tools, ecosystem data, and community intelligence into a single connection for AI agents. Created by @kalepail, it helps builders navigate the ecosystem without jumping between multiple sources.

Stellar Raven aggregates Stellar ecosystem data, tools, and infrastructure in one unified service. Designed for agents and systems to access all available Stellar resources and capabilities without integration friction.

OpenZeppelin and T-REX Network partner to advance institutional compliance infrastructure. The collaboration includes hardening the T-REX Protocol, evolving ONCHAINID, delivering ERC-3643 as an audited OpenZeppelin Contracts library component, and expanding to non-EVM networks with a Stellar-native implementation already complete.

Tansu documentation updates clarify three governance features: on-chain project registration with 5 XLM collateral, support for six Git forges (GitHub, GitLab, Bitbucket, Codeberg, Gitea, Radicle), and three voting weight models—badge-based, token-weighted, or custom NQG scores for governance proposals.

Circle's CCTP V2 enables native burn-and-mint USDC transfers between Base and Stellar, cutting costs from fixed fees to fractions of a basis point. The engineering challenge: distributed systems problems where burn and mint occur in separate transactions seconds apart, requiring solutions for on-chain verification, fail-closed RPC handling, and idempotent nonces.

COZ demonstrated how to make blockchain invisible to users at Stellar 37°. Their prototype combines AI to parse payment files, Smart Accounts and passkeys for signing, and Pix for local onramps. The result: cross-border payments that feel native, not technical.

Stellar introduces Confidential Tokens, a privacy layer for SEP-41 tokens built by OpenZeppelin and Nethermind. The wrapper contract architecture hides balances and transfer amounts via zero-knowledge proofs while keeping addresses visible—designed for institutional use cases like payroll and treasury management. Testnet live now.

Runtime Verification achieved Milestone 2 on its SCF-funded WebAssembly debugger for Soroban: a formal-semantics-grounded execution tracer and testnet node. Milestone 3 (DAP server, VS Code and Cursor plugins) is underway, with completion expected in 3 weeks. The debugger enables step-through execution, breakpoint debugging, and memory inspection for Rust-compiled smart contracts.

OctoPos EVM brings cross-chain position monitoring to treasury teams and asset managers evaluating both EVM and Stellar protocols. A single API endpoint now shows Aave exposure on Ethereum and Blend allocations on Stellar in unified response format, eliminating the need for separate dashboards and reconciliation workflows.

OtterSec researchers discovered critical vulnerabilities in React Native WebView and similar mobile wallet libraries. Missing origin isolation allows malicious dApps to access camera, GPS, and other permissions without user consent, affecting over 20 production wallets across the ecosystem.

OctoPos RMS, a real-time DeFi risk monitoring system built by crediolabs, went live on Stellar to monitor Blend's lending pools. The tool detects oracle anomalies and health risks, addressing an operational gap as institutional capital moves on-chain.

Protocol 25 and 26 introduced zero-knowledge primitives (BN254, Poseidon) that make private payment systems practical on Stellar. Arcane is building production infrastructure for compliance-ready privacy, enabling builders to protect sensitive financial flows on public rails while maintaining clear disclosure and reporting paths.