XRP Ledger Fixes Decade-Old Vulnerability That Could Have Minted Billions of XRP Out of Thin Air

On October 10, the XRP Ledger recently patched a critical security vulnerability traceable to 2015. The vulnerability was discovered by researcher Cayden Liao and Veria AI and was reported internally on September 22. An attacker could exploit a counter overflow flaw in the ledger's built-in exchange by opening hundreds of accounts to create a large amount of XRP out of thin air at an extremely low cost and cash it out, thereby exceeding the fixed supply cap of 100 billion XRP. RippleX quietly released the patched version xrpld 3.4.1 on September 25 and stated that there is currently no evidence of any public network having been exploited.