XRP Ledger Fixes Bug That Could Have Broken the Token’s Fixed Supply
By Unchained
AI summary of the source article
XRP Ledger developers fixed a critical integer overflow bug in release xrpld 3.4.1. If exploited, the flaw would have allowed an attacker to mint spendable XRP far beyond the total supply in a single transaction.
Why it matters
The report noted that bypassing the amendment process "only makes sense for the most severe bugs, where the exploit is even worse than a network halt."
Key facts
- The vulnerability was reported on Sept. 22 and patched in xrpld 3.4.1 on Sept. 25, with no evidence found of exploitation on public networks.
- The flaw originated from unchecked 64-bit addition in the payment engine and had likely existed since 2015.
- Developers bypassed the usual validator amendment voting process to prevent exposing the vulnerability while it remained exploitable.
Source excerpt · Unchained
The flaw, which may have existed since 2015, was patched Sept. 25 in a fix that became the first transaction-processing change deliberately shipped without an amendment vote since amendments were introduced. The post XRP Ledger Fixes Bug That Could Have Broken the Token’s Fixed Supply appeared first on Unchained .