ChainCatcher report: In response to Veria AI’s report of a critical vulnerability in the payment engine, J. Ayo Akinyele, Engineering Lead at RippleX, stated that the XRP Ledger (XRPL) payment engine contained a severe vulnerability lasting over a decade, which could enable the minting of XRP beyond its fixed supply. The vulnerability was discovered through a bug bounty program and has not been exploited. The development team has released patch version xrpld 3.4.1 and coordinated validator upgrades prior to public disclosure. Akinyele noted that AI is accelerating the pace of vulnerability discovery, and XRPL will increase proactive security investments, address technical debt, advance formal verification, and systematically eliminate potential risks in legacy code.
RippleX Engineer: Critical 10-Year XRP Ledger Vulnerability Discovered and Fixed
ChaincatcherShare
Summary
RippleX engineering lead J. Ayo Akinyele revealed a critical flaw in the XRP Ledger (XRPL) that had existed for over a decade. The vulnerability in the distributed ledger could have enabled XRP to be minted beyond its fixed supply. Identified through a bug bounty program, it was patched in xrpld 3.4.1. Validators coordinated a network upgrade prior to public disclosure. Akinyele noted that AI is accelerating vulnerability discovery, and XRPL will focus on blockchain development, formal verification, and reducing risks from legacy code.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.