XRP Ledger deploys upgrade to block manifest flood, adds four new protections

XRP Ledger Foundation responds to manifest flood

After developers detected a manifest flood impacting nodes on Friday, July 31, the XRP Ledger Foundation acted swiftly to contain the issue and release an upgrade. The foundation, a non-profit dedicated to supporting and advancing the XRP Ledger blockchain ecosystem, confirmed that the network’s operations and transaction processing remained unaffected throughout the incident. Ledger closings continued without interruption, but the team prioritized patching the vulnerability to prevent future disruption.

The root cause of the manifest flood has not yet been disclosed. However, developers indicated that it was tied to how nodes process validator manifests—key cryptographic documents used to guarantee the authenticity of validators within the ecosystem.

Prior to the upgrade, nodes permitted unlimited acceptance, storage, and rebroadcasting of validator manifests from unknown sources. While this did not interrupt transaction processing, it created unnecessary consumption of network and computing resources.

Mini dictionary: Validator manifests, in the context of the XRP Ledger, are cryptographically signed documents that associate an operator’s master key with their ephemeral signing key, allowing other network participants to verify the legitimacy of validators and manage key rotations securely.

The XRP Ledger Foundation stated that the new software protections are intended to address vulnerabilities that could lead to excessive resource use by limiting unwanted data from unknown sources, even though the flooding event did not impact the network’s ability to close ledgers or process transactions.

Four new protections added to XRPL

The software upgrade introduces four major security measures. Firstly, the network now actively rejects abnormally large manifests, closing an avenue for excessive data flooding. Secondly, there is a strict limit to the number of manifest batches that can be processed from incoming connections.

Thirdly, the amount of bulk manifest data that can be exchanged when connecting to new peers is now capped. This measure further restricts the potential impact of large floods of validator metadata.

Finally, nodes are restricted from storing manifests from more than 100 unknown validator keys. In addition, the system has been updated so that unknown validator manifests are no longer written to disk. As a result, any unwanted validator data will be cleared whenever a node restarts, rather than remaining stored within the network.

The XRP Ledger Foundation emphasized that these protections are designed to ensure network stability and prevent future incidents involving resource exhaustion without limiting the efficiency or openness of validator operations.

These security improvements are expected to reinforce the longevity and performance of the XRP Ledger, an open-source decentralized blockchain that powers the XRP cryptocurrency and supports fast, cost-effective transactions globally.