Home/Research library/Market research

Article / PANews

XRP Ledger fixes a vulnerability that lay dormant for about a decade, allowing attackers to mint XRP out of thin air.

PANews October 10 news, according to XRP Ledger's official disclosure, xrpld version 3.4.1 has fixed an integer overflow vulnerability in the payment engine. An attacker could mint XRP out of thin air and spend it normally through hundreds of specially crafted offers and one payment, and could bypass the "no XRP minting" security check, with the minted amount potentially far exceeding the total supply. The vulnerability may have existed since 2015. Researchers submitted it through the bug bounty program on September 22, and version 3.4.1 was released on September 25. No signs of exploitation have been found so far.

Related reading