Odaily Planet Daily reports: J. Ayo Akinyele, Engineering Lead at RippleX, posted on X that they are taking seriously the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine—a severe security issue that has existed in the codebase for over a decade and could theoretically allow excessive creation of XRP, exceeding the fixed supply cap. However, the vulnerability was discovered by the security research firm Veria AI through Ripple’s bug bounty program before it could be exploited.
J. Ayo Akinyele further added that the Ripple team rapidly developed and tested a fix, collaborating closely with validation nodes to complete the network upgrade before the vulnerability was publicly disclosed. Currently, AI is accelerating the pace of vulnerability discovery, and XRPL must enhance its security response capabilities further. RippleX will strengthen its bug bounty program, expand AI-assisted vulnerability discovery and adversarial testing, review long-standing code in the payment engine, consensus mechanism, and P2P network, advance formal verification of critical modules, and implement systematic security hardening to reduce potential risks. The goal is not merely to patch individual vulnerabilities, but to identify and eliminate latent risks in XRPL’s legacy code, making the network harder to compromise.

