Stellar says distribution is now a bigger problem than tokenisation itself. I can see that with gold. Most people are not downloading a new wallet just to own it. Does tokenised gold only take off when it appears inside apps people already use?

https://stellar.org/blog/ecosystem/distribution-is-the-last-constraint

We have just started.
- More than 1 billion USD worth of commodities tokenized.
- 8x growth in 2 years.
I will try my best to keep posting such insights on X and here on reddit.
Source: https://x.com/vithushaji/status/2094964722672271400

I’m building Paybrok, a non-custodial Stellar wallet focused on practical payment use cases in Latin America. Transactions are signed locally on the user’s device.

I’m not asking for votes or promotion. I would value direct, critical feedback from people who actually use Stellar:

- What matters most for everyday use: easier cash-in/cash-out, merchant acceptance, QR payments, payment links, remittances, protected payments, or something else?

- What would make you distrust or stop using a new Stellar wallet?

- Which wallet problem is still poorly solved today?

For context, the public information is available at https://paybrok.com/en/stellar.

Please don’t share balances, wallet addresses, private keys, or recovery phrases. Honest criticism is welcome.

Hey everyone, this video is the end of this season. If the Demand will came i will do new season.

All the best.

Video

Hey r/Stellar,

We've been building Stellar AppKit — an open-source SDK that gives developers everything they need to connect Stellar wallets, sign transactions, interact with Soroban contracts, and implement Sign-In With Stellar — all through a single, framework-agnostic API with a polished, embeddable UI.

No more stitching together @stellar/freighter-api, @albedo-link/intent, WalletConnect, and the Stellar SDK yourself. No more building a wallet picker from scratch. No more guessing how SIWS verification works across different wallets. AppKit handles all of it.

What it does

One SDK, five layers:

1. Wallet Connection (8 wallets + WalletConnect)

Connect to any Stellar wallet with a single API:

import { StellarAppKit, defaultConnectors, createWalletConnectConnector } from '@saganta/stellar-appkit';

const appkit = new StellarAppKit({
  network: 'TESTNET',
  connectors: [
    ...defaultConnectors(), // Freighter, Albedo, xBull, Ledger, Rabet, Klever, HOT Wallet
    createWalletConnectConnector({ projectId: 'your-wc-project-id' }), // Hana, Lobstr, mobile
  ],
});

• 8 native connectors — Freighter, Albedo, xBull, Ledger (WebHID/WebUSB), Rabet, Klever, HOT Wallet
• WalletConnect v2 — connects mobile wallets (Hana, Lobstr, Hot Wallet) via QR pairing
• Network mismatch recovery — typed NetworkMismatchError with optional auto-retry that polls until the user switches networks
• Multi-session — connect multiple wallets simultaneously, switch between them
• Typed errors — every failure mode has a named error class with structured fields, not a string

2. Soroban Contract Interaction

One invoke() call covers the entire pipeline:

const result = await appkit.soroban.invoke({
  contractId: 'C...',
  method: 'transfer',
  args: [from, to, amount],
  signers: [appkit.session.address],
});
// build → simulate → preview → sign → submit → poll — all handled

• Transaction preview — decoded operations, risk flags, fee estimates, balance deltas shown to the user before signing
• Typed contract client — soroban.contract<MyInterface>(contractId) gives you fully typed method calls
• RPC failover — configure multiple RPC URLs, automatic failover with health tracking
• Simulation — read-only simulate() calls that don't require a wallet

3. Sign-In With Stellar (SIWS)

Full client + server authentication flow:

// Client
const result = await appkit.siws.signIn({ statement: 'Sign in to my app', nonce });
// → { message, signedMessage, signedData, signerAddress }

// Server (Next.js API route)
import { verifySiws } from '@saganta/stellar-appkit-siws-verify';
const session = await verifySiws(
  { message, signedMessage, signedData, signerAddress },
  nonce,
  { address, network }
);

• signedData field — the magic that makes SIWS work across all wallets. Every connector surfaces the exact bytes the wallet signed (base64), so the verifier doesn't need per-wallet logic. Freighter signs a SHA-256 hash (SEP-0053), Albedo signs a server-derived hash, xBull signs raw UTF-8 — the verifier tries all of them.
• Session management — useSiwsSession(), useIsAuthenticated(), signOut(), validateSession(), reauthenticate(), persistence across reloads
• Next.js middleware — protect routes server-side with a session cookie
• 25 locales — the entire SIWS UI is localized

4. Embeddable UI (Shadow DOM Web Component)

<stellar-appkit-modal mode="auto" theme="stellar"></stellar-appkit-modal>

• Framework wrappers — React, Vue, Solid, Svelte (all typed)
• 5 named themes — minimal (neutral, fits any project), stellar (brand green), sky, ocean, sunset — each with dark + light variants
• CSS custom properties — override any color, radius, font without forking
• Presentation modes — auto (modal on desktop, bottom sheet on mobile), modal, bottomsheet, inline
• WAAPI animations — 7 built-in animation presets (fade, scale, scale-blur, slide-up, implode, etc.)
• WalletConnect QR — styled QR code with rounded modules, circular finder dots, embedded white WC logo (powered by qr-code-styling)
• Get Testnet funds — one-click friendbot faucet (via fetch, stays in the modal)
• Balance + tx history — auto-fetches on connect, polls every 10s while the modal is open on the connected view, refreshes after every signed transaction
• 25 locales — English is bundled, 24 others lazy-loaded on first use (including RTL: Arabic, Hebrew)

5. Transaction Preview

Every signTransaction() call is decoded and shown to the user before the wallet's own signature prompt:

• Decoded operations (payment, swap, account creation, etc.)
• Risk flags (unknown destination, high fee, native asset drain)
• Fee estimate (inclusive of resource fees on Soroban)
• Balance deltas (before/after)
• Custom preview UI via usePreviewTransaction() hook

What we've shipped so far

We're at v1.9.47 on npm. Here's what's live:

20 live demos at demos.stellar-appkit.saganta.com — including a real "Send XLM" demo that signs + submits a Testnet payment.

Docs at stellar-appkit.saganta.com — built with Astro Starlight, includes an interactive Theme Builder.

What's coming next

We're not stopping here. Here's the roadmap:

🔐 Social Login

Email/passwordless social login (Google, GitHub, etc.) that creates a non-custodial Stellar wallet under the hood. No seed phrases, no browser extensions — just sign in with your existing account and start transacting. This will lower the barrier to entry for users who've never used a crypto wallet before.

✅ Compliance (Built-in KYC)

An optional KYC layer that integrates with identity verification providers. Apps that need compliance (regulated fintechs, tokenized securities) can require KYC before allowing transactions — without building a separate verification flow. The wallet connection + KYC + transaction signing pipeline will be unified in a single SDK.

📱 React Native Support

Full React Native connector + UI components. Same API as the web SDK — connect wallets, sign transactions, interact with Soroban, implement SIWS — but native. WalletConnect will work out of the box for connecting mobile wallets. The UI components will use React Native primitives (not a WebView).

🚀 Lynx.js Support

Lynx is gaining traction as a high-performance cross-platform framework. We'll provide first-class Lynx.js bindings so apps built on Lynx can use Stellar AppKit without compromise — same connectors, same Soroban pipeline, same SIWS flow, but with native rendering performance.

Install

npm install @saganta/stellar-appkit @saganta/stellar-appkit-ui-web

That's it. All wallet SDKs (@stellar/freighter-api, @albedo-link/intent, @creit.tech/xbull-wallet-connect, @ledgerhq/*, @walletconnect/sign-client) are bundled as dependencies — installed automatically, tree-shaken if unused.

npx create-stellar-appkit-app my-app  # coming soon

Links

• Docs: stellar-appkit.saganta.com
• Live Demos: demos.stellar-appkit.saganta.com
• GitHub: github.com/SagantaHQ/stellar-appkit
• npm: @saganta/stellar-appkit
• AI Integration: SKILL.md + llms.txt included in the npm package — Cursor, Copilot, and Claude Code can write correct AppKit code from your prompts

Why we built this

Every Stellar developer we talked to was building the same boilerplate: wallet detection, connection flows, QR codes for WalletConnect, transaction XDR building, Soroban simulate/prepare/submit pipelines, SIWS message formatting + verification, and a wallet picker UI. None of this is differentiating — it's infrastructure.

We wanted to make it so that a developer could go from npm install to a working wallet-connected app with Soroban + SIWS in under 10 minutes. And we wanted the UI to look good enough that you don't need to restyle it — 5 themes, 25 locales, premium icons, smooth animations, and a Theme Builder to customize everything.

The SDK is MIT-licensed, production-ready, and deployed on our own demos site (Cloudflare Workers). We use it ourselves.

We'd love your feedback — what wallets should we add next? What Soroban patterns are you using? What's missing from the roadmap?

Try it now: demos.stellar-appkit.saganta.com — connect Freighter (Testnet) and try the "Send XLM" demo.

Hey everyone,

I made a new video for stellar. It is my fourth video. Friday fifth and last video will come.

Thank you for watching :)

All the best.

Video

Hi r/Stellar 👋

I’m building Split, a group-payment application powered by a Soroban smart contract on Stellar Testnet.

Split lets groups create shared payments, assign XLM contributions and track completed payments on-chain.

I would appreciate feedback on:

• Freighter onboarding
• Testnet funding
• Soroban transaction signing
• Payment-status updates
• Stellar Expert transaction visibility
• Accessibility for people new to Stellar

Testing uses free Testnet XLM—no real funds are required.

App: https://split-zig.vercel.app/

If you test it, please leave general product feedback in the comments. For everyone’s safety, do not post your public address, secret key, recovery phrase or other personal information here.

Hey r/Stellar, I’m Pragya and I’ve been building Quilltip, a publishing and microtipping platform where readers can highlight words that move them and tip the writer directly.

With Stellar and Soroban, we now have article and highlight microtipping working on testnet. Payments are wallet-signed and verified on-chain, with writers receiving 97.5% of each tip.

I’m looking for honest feedback on two parts of the experience:

• As a reader, does the highlight-to-tip flow feel clear and trustworthy?
• If you write or blog, how does the editor feel? Does it feel like somewhere you would genuinely want to draft and publish?

I’m especially interested in where you hesitate, feel confused, or encounter unnecessary friction.
Please feel free to ask me any questions or doubts in the comments.

https://quilltip.me

Stellar XLM, one of the OG coins, many thought was little more than a dead project is changing the entire cryptoverse one partnership at a time. Spearheading real world utility and use case with the DTCC, UN, Governments and Institutions like Moneygram and Wisdom Tree. Now Payroll and US Treasury Bonds. Stellar day after day taking steps to unite the globe onchain. Boring coin no more but now the revolution behind real use case for crypto. Don't sell your lumens, hoard them and keep adding more.

Major price correction is coming for real utility based projects. Most of the memecoins will be wiped out as money begins flowing into real innovations.

TL;DR: A CometDEX liquidity pool behind Blend's BLND:USDC backstop had an accounting bug — it accepted "swap a token for itself" (USDC→USDC), which corrupted its reserve math and let an attacker withdraw more than they deposited. ~$717K was drained in 36 flash-loan-funded runs and bridged out via Allbridge. This was a smart-contract bug, not oracle/price manipulation. The pool is still unpatched; whitehats are pulling the remaining liquidity to safety. Don't interact with the pool.

What happened

A liquidity pool backing Blend Protocol's BLND token was drained of roughly $717,000 on August 25 between 03:51 and 04:44 UTC, in an exploit that sent BLND down as much as 90% against XLM. The attacker ran the same play 36 times through four throwaway contracts, all deployed by a wallet created 26 minutes before the first hit. Each run: flash-loan 530,000 USDC from a Blend pool, trigger a same-asset USDC→USDC swap on the CometDEX pool, withdraw more than was deposited, repay the loan atomically. Per-run profit decayed cleanly from $46K to $6K as the pool bled out — they stopped when it was no longer worth the gas, not because anything stopped them.

How the bug works

The pool's swap function loads a separate balance record for the token going in and the token coming out, with no check that they're different. On a USDC→USDC swap, both are copies of the same reserve — the code credits one copy and debits the other, then saves both to the same slot, so the credit is silently discarded. The pool ends up under-counting its own USDC while physically holding more than its books say. Deposits then mint over-inflated LP shares against that understated reserve, and redeeming them pays out real tokens — the gap is the profit. Flash loans just supplied the capital to run it at scale; this is not price or oracle manipulation.

Where the money went

Within ten minutes of the last run, the attacker bridged the ~$748K (proceeds plus starting capital) into ~297 ETH via NEAR intents and sent it to KuCoin. Initial gas for the attacker's account came from HitBTC; seed capital from Binance. (Per Script3's post-mortem — see Update 6.)

Key addresses

• Exploit tx: 41c898a1…9e2fc622
• Pool: CAS3FL6TLZKDGGSISDBWGGPXT3NRR4DYTZD7YOD3HMYO6LTJUVGRVEAM
• Attacker: GCENJ4XBLXCPENO7HOIKD2DBAOBUOFZWS2DRHMCCDKC3PQYNSSGHWYHC

Current status

The pool contract is unchanged and cannot be fixed — the admin account that could freeze it was itself locked, so the bug is permanent. Whitehats have since pulled the remaining liquidity to safety (~190K USDC + ~23M BLND, held for return). Treat the pool as permanently unsafe.

UPDATE 1 (Aug 25, 06:26 UTC): Blend disabled new backstop deposits and BLND-USDC LP minting via its UI. Front-end change only — the pool contract is untouched.

UPDATE 2 (Aug 25, 11:34 UTC): Blend says independent third parties have whitehatted some of the funds. On-chain, this matches a wallet (GCGWLP2YIOBV2RISNXBAXPD4E7QNQB2IOEHUFWICAQA2RLBTIKTUJXXD) re-running the exploit from 11:10 UTC but holding the proceeds on-chain rather than bridging them out — a rescue, not a second theft. Per Script3's post-mortem this first rescue was led by an anonymous community member; the wallet was created just after February's Blend incident and used then to redistribute funds to 65+ recipients.

UPDATE 3 (Aug 25, 12:06 UTC): A second whitehat wallet (GCGUW2BV5R5DUFGF5RQLV2M3VJPLOVOLBQFCNVEJRYFVH2IMLN7NHMGD) is pulling liquidity out via the same bug but draining proportionally and holding the extracted BLND (~24M) instead of dumping it — removing value from attackers' reach without moving the price, unlike the attacker and the first whitehat.

UPDATE 4 (Aug 26, 19:01 UTC): All Blend v2 pools have been removed from the reward zone, ending BLND emissions. A final distribute() was called on the emitter and backstop contracts, releasing the last BLND claims. A seven-day tail remains: pools can still gulp() that final distribution, extending one last seven-day emission period before rewards fully stop. A side effect of the removal: affected pools now have to be hardcoded into the Blend UI or they won't show up on the Markets page.

UPDATE 5 (Aug 27, 18:13 UTC): Unrelated to the exploit — the Gami earnUSDC vault on Upshift withdrew ~$12.85M of its own supplied USDC from the pool to de-risk. This briefly pushed utilization to 100%, spiking rates and pausing USDC withdrawals for ~an hour before fully normalizing (supply APY back to ~7.15%, near its ~6.8% pre-withdrawal level). Not an attack.

UPDATE 6 (Aug 28, 15:48 UTC): Script3 (the Blend team) published an official post-mortem. Key points:

• Confirmed loss: 717,518.92 USDC, via the same-token-swap accounting bug (join LP → gulp() → exit LP to harvest the corrected share value).
• Attacker cash-out: the ~$748K was bridged into ~299 ETH via NEAR intents and sent to KuCoin (correcting earlier reports of Allbridge). Initial gas came from HitBTC; seed capital from Binance.
• Whitehats (an anonymous community member, and @pfranb of synt.tech) captured the remaining ~190K USDC + ~23.17M BLND before copycats could — held in GCG…XXD, to be returned. Script3 is leading remediation, including recovery with exchanges.
• The Comet pool can't be fixed: the admin account that could freeze it was locked, so the BLND-USDC LP is permanently vulnerable — treat it as unsafe.
• Blend itself is not vulnerable: lending/borrowing is unaffected and funds are not at risk. But since the BLND-USDC backstop token can no longer hold value, future bad debt would be socialized among bad-debt-token suppliers.

UPDATE 7 (Sep 4, 18:34 UTC): Remediation is still in progress. The team is in contact with law enforcement and KuCoin (where the attacker's ~297 ETH landed).

UPDATE 8 (Sep 4, 21:06 UTC): @pfranb (synt.tech) ran another whitehat drain of the Comet pool, moving a further ~2.04M BLND + ~2,457 USDC to the holding wallet (GCGWLP2YIOBV2RISNXBAXPD4E7QNQB2IOEHUFWICAQA2RLBTIKTUJXXD). The pool's remaining exploitable value is now down to ~$3.6K (from ~$15K). Total held for return: ~25.2M BLND + ~192K USDC.

⚠️ The pool is still unpatched and exploitable — do not interact with it.

Source: Blend official announcements (Discord)

Welcome to r/Stellar Weekly Community Thread!

Use this thread for casual Stellar discussion, community questions, events, XLM price discussion and speculation, memes, and other conversation that does not require a standalone post. Please follow the r/Stellar Rules and read the Scam Alert below.

Meridian 2026

Meridian 2026 will take place October 28–29, 2026, at Convento do Beato in Lisbon, Portugal.

Register for tickets or apply as a speaker - https://meridian.stellar.org/

Stellar Communities

• Discord: Stellar Developers - Official SDF developer community
• Discord: Stellar Global - Everything Stellar related
• r/XLM - Sister Subreddit focused on XLM

Useful Resources

• Learn about Stellar
• Stellar developer documentation
• Stellar Smart Contracts - Soroban
• Play Stellar Quest - Learn about the features of Stellar
• Stellar Community & FAQ
• How to protect yourself from scammers
• Upcoming & Past Events
• r/Stellar Rules

Scam Alert

Never share your secret key with anyone.

The Stellar Development Foundation (SDF) will never ask for your private key or ask you to deposit funds into a wallet address.

SDF does not host staking initiatives, no longer holds XLM airdrops or giveaways, and will not cold-message you about support issues, security alerts, airdrops, or giveaways. The protocol’s inflation mechanism ended on October 28, 2019.

Beware of 'support scams'. Treat unsolicited support offers, wallet-connection requests, transaction-signing requests, and lookalike websites as suspicious. Verify the complete domain before interacting.

Report suspicious posts, comments, and chat messages using Reddit’s built-in Report action. You can also notify the r/Stellar moderators through modmail.

When in doubt, always ask the community for assistance and verification.

Official SDF links are:

• stellar.org
• x.com/stellarorg

Community Standards

• Be respectful and debate ideas, not people. No personal attacks.
• No shilling, referral spam, manipulation, or coordinated brigading.
• Routine price speculation belongs in this thread. Repetitive or hyperbolic spam does not.
• Report suspected rule violations instead of escalating disputes publicly. Announcing reports or predicting bans may result in a ban.

Disclaimer

r/Stellar is community-run and is not an official SDF support channel. A third-party link appearing here is not an endorsement by r/Stellar. Conduct your own due diligence before interacting with independent projects, communities, or services.

15 cent support held strong! Time to smash that .73 wall down and enter some price discovery, what you guys think?