$XRP A 10 Year Old Hidden Vulnerability Just Patched, Fortunately, It Was Never Exploited
The XRP Ledger team has just revealed a shocking update: version xrpld 3.4.1 has fixed an integer overflow vulnerability in the payment engine that could have allowed an attacker to arbitrarily create XRP.
Specifically:
An attacker could combine hundreds of specially crafted orders with a single payment transaction to bypass the "no additional XRP issuance" safety check.
The resulting issuance could have far exceeded the current total supply.
This vulnerability may have existed since 2015.
Timeline:
September 22: Researchers reported the issue via the bug bounty program.
September 25: Version 3.4.1 was released.
Current status: No signs of exploitation have been detected.
This was a critical vulnerability had it been exploited, it could have completely destroyed confidence in XRP. Fortunately, the development team responded quickly, and the bug bounty community played its role effectively.
The lesson: No system is perfect. Even a blockchain that has been running for over a decade can harbor a fatal vulnerability.
A 10 year old vulnerability exploitation would have been catastrophic. What do you think about this news?
News is for reference, not investment advice. Please read carefully before making a decision.
The XRP Ledger team has just revealed a shocking update: version xrpld 3.4.1 has fixed an integer overflow vulnerability in the payment engine that could have allowed an attacker to arbitrarily create XRP.
Specifically:
An attacker could combine hundreds of specially crafted orders with a single payment transaction to bypass the "no additional XRP issuance" safety check.
The resulting issuance could have far exceeded the current total supply.
This vulnerability may have existed since 2015.
Timeline:
September 22: Researchers reported the issue via the bug bounty program.
September 25: Version 3.4.1 was released.
Current status: No signs of exploitation have been detected.
This was a critical vulnerability had it been exploited, it could have completely destroyed confidence in XRP. Fortunately, the development team responded quickly, and the bug bounty community played its role effectively.
The lesson: No system is perfect. Even a blockchain that has been running for over a decade can harbor a fatal vulnerability.
A 10 year old vulnerability exploitation would have been catastrophic. What do you think about this news?
News is for reference, not investment advice. Please read carefully before making a decision.