XRP Ledger Bug Could Have Created 18 Trillion XRP Before Fix
- Developers found no evidence of exploitation on public networks.
- Veria estimated the flaw could create 18.45 trillion XRP per transaction.
- The emergency patch sparked debate over temporarily withheld source code.
An XRP Ledger security bug could have allowed attackers to create trillions of spendable tokens, developers disclosed on October 9. The flaw dated to 2015 and was patched on September 25. Developers found no evidence of public exploitation. The XRP Ledger Foundation also said on X that checks confirmed the public supply remained intact.
How the XRP Ledger security bug bypassed supply checks
Veria reported the flaw on September 22. RippleX reproduced the XRP Ledger security bug on a standalone server, confirming that newly created tokens could fund another payment.
He estimated potential creation at about 18.45 trillion XRP per transaction, over 184 times the original supply. Liao also reported a $250,000 bounty.
The payment engine flaw involved integer overflow: an oversized total wrapped into a much smaller number. Sellers could receive full payments while buyers paid almost nothing. A supply safeguard repeated the arithmetic error, allowing unauthorized XRP minting.
The exploit required deliberately abnormal trading offers across hundreds of accounts. Ordinary payments could not trigger it, according to the disclosure, despite the long exposure period.
XRP Ledger security bug fix prompts transparency debate
Developers shipped xrpld 3.4.1 with compiled software before releasing its source code. Justin Bons criticized the temporary withholding on X.
The overflow fix applied immediately when servers upgraded, bypassing the usual amendment delay. More than 80% of default UNL validators upgraded on release day.
A separate Batch fix activated through amendments on October 9. The Foundation also pledged broader formal verification, AI adversarial testing and researcher collaboration.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Bitcoin (BTC) Tanks Toward $80K, Ripple (XRP) Loses Key Support: Weekend Watch
WLD Price Prediction: Worldcoin Eyes $12 as Cloudflare Partnership Advances
Last week, retail investors made a "record-breaking" dip buy of US chip leveraged ETFs, but this week they plummeted.
Last week, retail investors poured $6.1 billion into 3x leveraged chip ETFs, but suffered a 20.5% single-day plunge this Thursday, almost perfectly coinciding with the start of the rapid downturn. The cumulative decline in October has exceeded 43%, far surpassing the 15.9% loss of non-leveraged products during the same period. The root cause lies in the market’s skepticism toward AI investment returns. The most significant uncertainty is whether aggressive spending by tech giants will actually deliver on profit expectations, while the use of leverage has exponentially magnified the cost of this misjudgment.
Africa’s payment giant backed by SoftBank is rushing to list in the US! Opay (OPAY.US) plans to raise $336 million, with its valuation possibly exceeding $4 billion
The payment platform Opay Ltd., which focuses on the Nigerian market, plans to raise up to 336 million dollars through an initial public offering (IPO).
Crypto prices
More
