Hacking News
AI Agent Discovers XRP Ledger Vulnerability
An AI security agent at Veria Labs uncovered a critical flaw in the XRP Ledger (XRPL) that could have created approximately 18 trillion XRP in a single transaction. This vulnerability was reported on September 22 and patched three days later on September 25. The flaw was patched through an emergency fix bypassing the usual governance procedures, as the vulnerability was deemed too severe to wait for the standard amendment vote. The emergency fix took effect when nodes upgraded, while a separate Batch fix followed the normal voting process. No unauthorized XRP creation or loss of funds was reported, and no evidence of public-network exploitation was found. The incident highlights the importance of continuous security audits and the potential risks of legacy software that has survived years of conventional security reviews.