XRP Ledger disclosed a critical payment bug that could create spendable XRP from nothing, breaking the 100B supply cap. RippleX found no sign it was exploited.
The flaw sat in the payment engine since 2015. An attacker could open a few hundred accounts, have each offer a token for a huge amount of XRP, then buy them all in one payment. The total overflowed to a tiny number: sellers got paid in full, the buyer paid almost nothing, and the "no new XRP" check missed it.
The attack needed only a few hundred XRP in reserves plus fees. A researcher reported it via the XRPL bug bounty on Sept 22, and the fix shipped in xrpld 3.4.1 on Sept 25.
Partner Offers | Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist
