theblock.coarticleXRP Ledger patches decade-old bug that could have minted trillions of XRP
The Block reports on the XRP Ledger disclosure of a critical bug that had been in the payment engine since 2015. Order-book offer totals had no overflow check, so a single payment consuming a few hundred crafted offers could wrap the sum and mint spendable XRP past the 100B cap. Veria Labs' AI agent found it and built a working exploit, and RippleX shipped the fix in xrpld 3.4.1 on Sept. 25, bypassing the usual amendment vote to avoid tipping off attackers. The article also covers the $250K bounty, a separate Batch bug, and the closed-source-release criticism.
TL;DR Decade-old integer overflow in the XRP Ledger payment engine, found by an AI agent, could have minted ~18T XRP in one transaction. It was patched out-of-band with no amendment vote.
Organisations named here
- Cayden Liao
- J. Ayo Akinyele
- Justin Bons
- Mayukha Vadari
- RippleX
- Veria Labs
Technologies named here
- xrpld versions before 3.4.1
- XRP Ledger
- xrpld
Techniques named here
- Batch feature bug
- Integer Overflow
Related in Blockchain
blog.thorchain.orgwriteupTHORChain Exploit Report #2 — GG20 root-cause disclosure
protos.comarticleBlack Thursday revisited: MakerDAO keeper exploited for $500K
.jpg)
aikido.devwriteupGraphalgo campaign spreads to Terraform providers and Go Modules
sundaytimes.lkarticle