XRP Ledger Fixes 11-Year-Old Vulnerability That Could Generate XRP

iconChainthink
Share
This is the logo of the coin.
XRP
$1.400.54%
AI summary iconSummary
The XRP Ledger addresses a 11-year-old vulnerability that could have allowed attackers to generate XRP. The flaw, reported on September 22, enabled bypassing exchange amount limits, threatening the 100 billion XRP supply cap. Attackers could create multiple accounts and exploit the system using a single payment. RippleX confirmed that the generated XRP could be used in transactions but stated there is no evidence of a real-world exchange breach. A patch was released in xrpld 3.4.1 on September 25.

ChainThink reports that the XRP Ledger has patched a payment system vulnerability that may have existed since 2015.

This vulnerability could allow an attacker to bypass the token exchange amount calculation limits through specially crafted payment transactions, generating and spending large amounts of XRP, thereby undermining the 100-billion-coin supply cap.

Attackers can create hundreds of accounts, place offers to exchange small amounts of tokens for large sums of XRP, and execute the trades simultaneously with a single payment. Due to a flaw in the system’s calculation of total transaction value, the seller’s account may receive all the XRP while the buyer pays almost nothing in return.

Researchers Cayden Liao and Veria AI reported the vulnerability on September 22, and RippleX subsequently reproduced the attack, confirming that the generated XRP could be used in subsequent transactions.

RippleX stated that there is currently no evidence the vulnerability has been exploited on any public network; the development team released version xrpld 3.4.1 to patch the vulnerability on September 25.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.