Stellar Ecosystem
News

Circle's CCTP V2 enables native burn-and-mint USDC transfers between Base and Stellar, cutting costs from fixed fees to fractions of a basis point. The engineering challenge: distributed systems problems where burn and mint occur in separate transactions seconds apart, requiring solutions for on-chain verification, fail-closed RPC handling, and idempotent nonces.

The Notorious Bug Digest #9 dissects three critical blockchain vulnerabilities: a rule selection downgrade in Stellar smart account authorization, a ZK circuit misconstraint that halts privacy protocols, and signed-integer bit-smuggling in perpetuals. Detailed code analysis and remediation guidance for developers.

Stellar introduces Confidential Tokens, a privacy layer for SEP-41 tokens built by OpenZeppelin and Nethermind. The wrapper contract architecture hides balances and transfer amounts via zero-knowledge proofs while keeping addresses visible—designed for institutional use cases like payroll and treasury management. Testnet live now.

KindFi launches Venezuela Earthquake Emergency Relief campaign on Stellar, using on-chain escrow infrastructure from Trustless Work to ensure transparent, milestone-based fund releases to verified relief organizations.

AllUnity and Zebec launch an EURAU-powered employee benefits pilot on Stellar, integrating a MiCAR-compliant euro stablecoin with streaming payroll infrastructure. Employees receive benefits directly to digital wallets with access to spending, savings, and payment options.

Runtime Verification achieved Milestone 2 on its SCF-funded WebAssembly debugger for Soroban: a formal-semantics-grounded execution tracer and testnet node. Milestone 3 (DAP server, VS Code and Cursor plugins) is underway, with completion expected in 3 weeks. The debugger enables step-through execution, breakpoint debugging, and memory inspection for Rust-compiled smart contracts.

YLDS, from Figure, is a yield-bearing digital asset backed by US Treasuries that bridges cash management and blockchain settlement. Structured as an SEC-registered security, it distributes real yield while maintaining stable value, addressing a key limitation of stablecoins. The article outlines YLDS positioning relative to regulatory frameworks like the CLARITY Act, and showcases use cases in treasury management, trading collateral, and payroll workflows on Stellar, Solana, and Ethereum.

Archax's $GOVY, a tokenized US Treasury Bill token, will be available to US qualified purchasers through tZERO's SEC-registered, FINRA-member broker-dealer later this year. The partnership brings FCA-regulated and SEC-regulated infrastructure together to enable institutional access to tokenized government yield via on-chain settlement.

OctoPos EVM brings cross-chain position monitoring to treasury teams and asset managers evaluating both EVM and Stellar protocols. A single API endpoint now shows Aave exposure on Ethereum and Blend allocations on Stellar in unified response format, eliminating the need for separate dashboards and reconciliation workflows.

Alula publishes a technical guide to RWA-backed borrowing costs on Stellar, breaking down the full cost structure: kinked interest rates, reactive modifiers tied to pool utilization, one-time operation fees, and network transaction costs. Borrowing capacity is enforced atomically, and settlement is near-instant.

OtterSec researchers discovered critical vulnerabilities in React Native WebView and similar mobile wallet libraries. Missing origin isolation allows malicious dApps to access camera, GPS, and other permissions without user consent, affecting over 20 production wallets across the ecosystem.

OctoPos RMS, a real-time DeFi risk monitoring system built by crediolabs, went live on Stellar to monitor Blend's lending pools. The tool detects oracle anomalies and health risks, addressing an operational gap as institutional capital moves on-chain.

Protocol 25 and 26 introduced zero-knowledge primitives (BN254, Poseidon) that make private payment systems practical on Stellar. Arcane is building production infrastructure for compliance-ready privacy, enabling builders to protect sensitive financial flows on public rails while maintaining clear disclosure and reporting paths.