XRP Ledger developers said Friday that a patched payment-engine bug could have let an attacker create XRP out of nothing. A disclosure report said the critical-severity flaw had existed since 2015, with no evidence of exploitation on any public network. Veria Labs co-founder Cayden Liao said the firm's AI agent discovered the bug and built a working exploit that could have created about 18 trillion XRP in one transaction. RippleX shipped the fix in xrpld version 3.4.1 three days after Veria reported the bug on September 22. The fix took effect as servers upgraded rather than through the normal amendment process. Liao said Ripple paid Veria the program's maximum $250,000 bounty.