XRP Ledger patched old flaw that could create XRP from nothing

1. #0110.10
   Initial2026-10-10 04:24 · publication time

   XRP Ledger修复存在近11年重大漏洞，攻击者曾可利用其凭空生成XRP

   XRP Ledger developers disclosed a critical payment-path vulnerability dating to 2015 that could have let attackers mint and spend XRP beyond the 100 billion supply cap, which they reproduced and fixed in xrpld 3.4.1 with no evidence of exploitation in the wild.

   Source evidence: theblockbeats · CoinDesk · foresightnews · theblockbeats · The Defiant

2. #0210.11
   Aftermath2026-10-11 10:30 · publication time

   AI discovers XRP Ledger flaw that could mint 18 trillion tokens and put $94 billion market at risk

   New disclosure reveals the flaw was found by Veria Labs' AI security agent, could generate ~18 trillion XRP in a single transaction, and prompted RippleX to deploy an emergency fix bypassing standard governance, with a $250,000 bounty; no on-chain exploitation occurred.

   State after update: XRP Ledger's decade-old payment-engine flaw was discovered by an AI agent, could have minted ~18 trillion XRP, and was emergency-patched by RippleX outside the usual amendment process; no unauthorized XRP was created and no funds were lost.

   Source evidence: CryptoSlate · The Block

3. #0310.12
   Confirmation2026-10-12 00:35 · publication time

   XRP Ledger基金会澄清安全修复疑问：未增发XRP，供应量仍固定

   The XRP Ledger Foundation clarified that the xrpld 3.4.1 fix addressed a rule-bypass vulnerability requiring hundreds of deliberately crafted operations, not XRP inflation; total supply remains fixed at 100 billion, with about 99.986 billion currently circulating. It also said the flaw was responsibly disclosed by Cayden Liao and Veria AI, public binaries were released on September 25, and 3.4.1 later became a required version through a normal amendment vote with over 80% support sustained for two weeks.

   State after update: The old XRP Ledger payment-engine vulnerability was fixed in xrpld 3.4.1; the Foundation confirmed the fix did not involve inflation and XRP supply remains fixed at 100 billion. The flaw was discovered and responsibly disclosed by Cayden Liao and Veria AI, the fix was distributed via emergency coordination and later ratified through the normal amendment vote, with no unauthorized XRP minting or fund loss.

   Source evidence: theblockbeats

4. #0410.12
   Response2026-10-12 01:21 · publication time

   XRP Ledger defends emergency patch for unlimited XRP bug

   The XRP Ledger Foundation and developers publicly defended the Sept. 25 emergency patch, saying waiting for the usual two-week validator vote would have exposed the flaw; they rejected centralization claims, stressing the decision was joint among the Foundation, RippleX, core developers and validators, and that 3.4.1 later became required via a normal amendment vote with over 80% support sustained for two weeks.

   State after update: The old XRP Ledger payment-engine vulnerability is fixed in xrpld 3.4.1, which became a required version through a normal amendment vote; the Foundation and developers are publicly responding to questions about the emergency patch bypassing normal governance and XRPL's decentralization, with no unauthorized XRP minting or fund loss confirmed.

   Source evidence: Cointelegraph

All events · Back to the feed