XRP Ledger Fixes Critical Vulnerability After Over a Decade
Written with artificial intelligence.
A critical vulnerability in the XRP Ledger's payment engine, identified by Veria AI, has been present for more than ten years and could have allowed for the excessive issuance of XRP. RippleX's J. Ayo Akinyele confirmed that the team has released a fix and completed an upgrade before the disclosure.
Overview of the Vulnerability
On October 11, PANews reported that a serious vulnerability had been discovered in the XRP Ledger (XRPL) payment engine, which could potentially lead to the issuance of XRP beyond its fixed supply limit. This flaw, which has existed for over a decade, was identified through a bug bounty program and has not yet been exploited.
Mitigation Efforts
The development team has released version 3.4.1 of the XRPL daemon (xrpld) to address the issue. Prior to public disclosure, they coordinated with validators to ensure a smooth network upgrade.
Future Security Initiatives
J. Ayo Akinyele emphasized the role of artificial intelligence in accelerating the detection of vulnerabilities. Moving forward, XRPL plans to increase its proactive security measures, address technical debt, advance formal verification processes, and systematically eliminate potential risks in legacy code.