The XRP Ledger has just disclosed a vulnerability hidden for nearly 10 years: attackers could "print" XRP out of thin air, breaking through the 100 billion total supply cap. In a nutshell: nothing went wrong this time because a white hat found it first.
1. The vulnerability stemmed from an integer overflow in the payment engine dating back to 2015. It was reported through the bug bounty program on September 22, and a fix was released in xrpld 3.4.1 on September 25. The official team said it found no evidence of exploitation on the public network.
2. More than 80% of default validator nodes had upgraded by the day the fix was released.
3. A reminder about the risks: a "fixed supply" ultimately depends on code for its guarantee, and even long-established blockchains can have hidden vulnerabilities. If you see a headline about "increased issuance," check the official announcement first—don't panic and sell at a loss.
Do you check the bug bounty programs and security audits for the coins you hold?
#XRP账本修复可增发XRP的漏洞 $XRP
1. The vulnerability stemmed from an integer overflow in the payment engine dating back to 2015. It was reported through the bug bounty program on September 22, and a fix was released in xrpld 3.4.1 on September 25. The official team said it found no evidence of exploitation on the public network.
2. More than 80% of default validator nodes had upgraded by the day the fix was released.
3. A reminder about the risks: a "fixed supply" ultimately depends on code for its guarantee, and even long-established blockchains can have hidden vulnerabilities. If you see a headline about "increased issuance," check the official announcement first—don't panic and sell at a loss.
Do you check the bug bounty programs and security audits for the coins you hold?
#XRP账本修复可增发XRP的漏洞 $XRP