Key Highlights: Security researchers discovered an 11-year-old integer overflow bug in the XRP Ledger that theoretically could have allowed the creation of new XRP tokens out of thin air. Discovered on September 22 by researcher Cayden Liao and Veria AI, the flaw went unnoticed because typical transaction activity never approached the threshold needed to trigger ...
Key Highlights: Security researchers at Veria Labs uncovered an integer overflow bug originating in 2015 code that could have generated up to 18 trillion unauthorized XRP via single crafted transactions. RippleX engineers rolled out an emergency patch via xrpld version 3.4.1 without the standard two-week amendment voting period to preempt network exploitation. A secondary consensus ...
Key Highlights: An emergency security release patched a critical 2015 integer overflow vulnerability in the XRP Ledger that could have enabled an attacker to mint unbacked XRP tokens. Critics, including Cyber Capital founder Justin Bons, argued that the rapid rollout of binary updates challenged the network’s decentralized claims. The XRPL Foundation, RippleX, and independent validators ...
Key Highlights A critical 64-bit integer overflow vulnerability reported via the XRP Ledger bug bounty program could have allowed malicious actors to generate and extract billions of unauthorized XRP. Security controls designed to prevent the unauthorized creation of XRP were bypassed during testing by using hundreds of specially crafted buy and sell orders within a ...
Key Highlights The XRP Ledger’s Batch upgrade, originally slated for Sept. 29 activation, has been delayed by at least 10 days after validator support temporarily dropped below the required threshold. The corrected amendment, BatchV1_1, regained support from 30 of 35 trusted validators on Sept. 25, initiating a new two-week countdown targeting an Oct. 9 activation ...
RippleX Declares XRP Ledger Batch Amendment Ready for Activation Ripple’s developer division, RippleX, has announced that the XRP Ledger’s Batch amendment is ready for activation. A technical review published Monday details how the feature was rebuilt following the discovery of a critical security flaw in the original version. The corrected Batch V1.1 is included in ...