On-chain detective ZachXBT criticised the XRP Ledger Foundation for paying a white-hat hacker only $250,000 for finding a severe 'unlimited XRP minting' vulnerability, saying the low reward may deter responsible reporting. The foundation said the flaw did not mint XRP and was patched by community consensus.
PANewsThe story so far: XRP Ledger payment flaw
Researchers reported a decade-old XRP Ledger payment flaw that could have minted XRP beyond the 100bn cap; RippleX said there was no evidence of exploitation and released xrpld 3.4.1. The fixCleanup3_4_0 patch is now expected to activate around 23 Oct after 29 validators backed it.
XRP Ledger fixes decade-old flaw that could have minted XRP
Researchers Cayden Liao and Veria AI reported on 22 September a payment flaw in XRP Ledger dating to 2015 that could have let attackers generate and spend XRP beyond the 100bn cap. RippleX reproduced it, said there is no evidence it was exploited on public networks, and released xrpld 3.4.1 on 25 September.
RippleX says XRPL flaw could have allowed excess XRP creation
RippleX engineering lead J. Ayo Akinyele said a critical flaw in the XRP Ledger payment engine, present for over 10 years, could theoretically have created XRP beyond its fixed supply. He said Veria AI found it through Ripple's bug bounty programme and the fix was tested and deployed with validators before disclosure.
XRP Ledger Foundation says security fix did not mint new XRP
The XRP Ledger Foundation said a recently patched vulnerability did not create new XRP, with supply fixed at 100 billion and about 99.986 billion XRP in existence. It said the flaw was fixed in version 3.4.1 and that community consensus drove the patch.
ZachXBT says XRPL paid white-hat hacker only $250,000
On-chain detective ZachXBT criticised the XRP Ledger Foundation for paying a white-hat hacker only $250,000 for finding a severe 'unlimited XRP minting' vulnerability, saying the low reward may deter responsible reporting. The foundation said the flaw did not mint XRP and was patched by community consensus.
XRPL lending bug fix due around 23 Oct, pending validator support
The XRP Ledger patch fixCleanup3_4_0 is expected to activate around 09:34 UTC on 23 Oct after 29 validators backed it, CoinDesk reported. That is the minimum threshold, so one withdrawal restarts the countdown, and activation would not mean final approval for the lending feature.
Odaily
CoinNessMore Altcoins updates
Every update is a short rewrite, by AI in our own words, of a flash from the outlet named on it, credited and linked. Updates are joined into one story by AI; our editors can change a story’s name or take an update out. Not investment advice.
Breaking news and our own Originals on your phone or desktop, the moment they are out. A few alerts a day at most.