XRP had a vulnerability that may have been lurking for ten years. If exploited, coins created out of thin air could still be spent.
This security issue was disclosed by XRPL on October 9, and researchers have reproduced it in a test environment. A patched version was released on September 25, and officials say there’s no evidence it was exploited on the public network.
But I think the detail worth watching most is this: the very safeguard designed to check that “coins can’t be created out of thin air” was also tripped up by the same kind of calculation error.
Put simply, the calculations went wrong—and the checks meant to catch them got the same answer wrong too.
Patching the vulnerability is obviously a good thing. But “it’s been running for years” is no guarantee of security.
#XRP
This security issue was disclosed by XRPL on October 9, and researchers have reproduced it in a test environment. A patched version was released on September 25, and officials say there’s no evidence it was exploited on the public network.
But I think the detail worth watching most is this: the very safeguard designed to check that “coins can’t be created out of thin air” was also tripped up by the same kind of calculation error.
Put simply, the calculations went wrong—and the checks meant to catch them got the same answer wrong too.
Patching the vulnerability is obviously a good thing. But “it’s been running for years” is no guarantee of security.
#XRP