$XRP Decade-Old Vulnerability Patched, No New XRP Created
The XRP Ledger Foundation has officially addressed the recent security incident. The good news: no new XRP was created, and the vulnerability has been resolved.
Incident Details:
The vulnerability had existed in the codebase for over a decade and could theoretically have been exploited to bypass the fixed total supply limit of 100 billion XRP. However, it was discovered by Veria AI through Ripple’s bug bounty program before any exploitation occurred.
Upon verification, the total circulating supply of XRP on the ledger stands at approximately 99.986 billion confirming that no new XRP was generated.
Regarding Patch 3.4.1:
The vulnerability was fixed in version 3.4.1 two weeks ago. This version became mandatory on the network only after undergoing the standard amendment voting process and securing sustained support from over 80% of validators for two consecutive weeks.
Authorities noted that triggering the vulnerability required hundreds of carefully crafted operations; standard payment transactions were virtually unaffected by the issue.
Regarding the Fix Process:
Publicly announcing the patch could have allowed attackers to use AI to accelerate vulnerability analysis. To mitigate this, the XRPL community including the XRP Ledger Foundation, RippleX, core developers, and validators reached a social consensus to proceed with a direct release of the fix. Moving forward, collaboration with RippleX and the community will be strengthened in areas such as formal verification, AI-based adversarial testing, security research, and bug bounty programs.
A decade-old vulnerability was patched before it could be exploited—no new XRP was created. What are your thoughts on the security of the XRPL following this incident?
News is for reference, not investment advice. Please read carefully before making a decision.
The XRP Ledger Foundation has officially addressed the recent security incident. The good news: no new XRP was created, and the vulnerability has been resolved.
Incident Details:
The vulnerability had existed in the codebase for over a decade and could theoretically have been exploited to bypass the fixed total supply limit of 100 billion XRP. However, it was discovered by Veria AI through Ripple’s bug bounty program before any exploitation occurred.
Upon verification, the total circulating supply of XRP on the ledger stands at approximately 99.986 billion confirming that no new XRP was generated.
Regarding Patch 3.4.1:
The vulnerability was fixed in version 3.4.1 two weeks ago. This version became mandatory on the network only after undergoing the standard amendment voting process and securing sustained support from over 80% of validators for two consecutive weeks.
Authorities noted that triggering the vulnerability required hundreds of carefully crafted operations; standard payment transactions were virtually unaffected by the issue.
Regarding the Fix Process:
Publicly announcing the patch could have allowed attackers to use AI to accelerate vulnerability analysis. To mitigate this, the XRPL community including the XRP Ledger Foundation, RippleX, core developers, and validators reached a social consensus to proceed with a direct release of the fix. Moving forward, collaboration with RippleX and the community will be strengthened in areas such as formal verification, AI-based adversarial testing, security research, and bug bounty programs.
A decade-old vulnerability was patched before it could be exploited—no new XRP was created. What are your thoughts on the security of the XRPL following this incident?
News is for reference, not investment advice. Please read carefully before making a decision.