XRP Ledger Patched Decade-Old Bug that Could Create Billions of Dollars in XRP From Nothing
RippleX said it found no evidence of public exploitation after patching the flaw, which researchers said could have let an attacker create spendable XRP.
- On Friday, a security report revealed that a flaw in the XRP Ledger payment system could have allowed attackers to create XRP tokens beyond the 100 billion supply limit.
- Believed to date to 2015, the vulnerability functioned through the ledger's built-in exchange, where attackers could manipulate transaction totals to receive XRP without paying for it.
- Researcher Cayden Liao and Veria AI internally reported the bug on Sept. 22, prompting developers to ship a fix in xrpld 3.4.1 server software on Sept. 25.
- RippleX, the developer arm of Ripple, reproduced the attack on a standalone server but found no evidence the flaw was exploited on any public network.
- This incident joins a series of long-hidden security flaws surfaced with AI help since July, including the Coldcard wallet bug behind the theft of at least 1,367 BTC.
42 Articles
42 Articles
XRP Ledger's $94 Billion Shadow: How a Decade-Old Math Flaw Nearly Printed Trillions
A decade-old integer overflow in the XRP Ledger's payment engine could have let attackers mint 18.45 trillion spendable XRP in one transaction, threatening the network's fixed 100 billion supply and $94 billion market value. Veria Labs' AI found the flaw. RippleX patched it quietly in days with no evidence of exploitation. The narrow escape exposes persistent risks in core financial code.
A Decade-Old Bug That Could Have Minted Unlimited XRP: Is the 100 Billion Cap Safe Now?
A flaw hiding in the XRP Ledger since 2015 could have let an attacker conjure spendable XRP out of nothing, bypassing the 100 billion coin cap entirely. What it took to trigger it, and whether any extra coins were ever minted, is more unsettling than the fix itself.
XRPL Bug Found That Could Have Created New XRP From Nothing
XRP Ledger (XRPL) patched a decade-old overflow flaw that could have created spendable XRP beyond the 100 billion supply cap, with no evidence of Mainnet exploitation. The XRP Ledger has patched a critical flaw that could have allowed a deliberately constructed payment to create spendable XRP beyond the network’s fixed supply.Visit Website
XRP Ledger Fixed a Bug From 2015 That Could Have Created XRP Out of Thin Air
The XRP Ledger fixed a decade-old software flaw that could have allowed an attacker to create spendable XRP without funding it, bypassing one of the network's most basic monetary rules: no more than the original 100 billion XRP are supposed to exist. The vulnerability was reported on September 22 by researcher Cayden Liao and Veria AI through the XRPL bug bounty program. RippleX engineers reproduced the attack that day, confirmed that the newly …
Coverage Details
Bias Distribution
- 80% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
