Hacking News
Ripple Addresses XRP Fixed Supply Vulnerability
Ripple has addressed a critical software vulnerability in XRP's fixed supply, which could have allowed unauthorized XRP creation. The engineering team is expanding AI-assisted testing and mathematical checks to uncover and address longstanding weaknesses. The vulnerability was discovered through the XRP Ledger's bug bounty program and involved a flaw in the payments engine that could have led to incorrect amount calculations. The fix was released in xrpld 3.4.1 on September 25, and no evidence of public-network exploitation was found. Ripple emphasizes the importance of AI in vulnerability discovery and plans to strengthen AI-assisted searches and adversarial testing to identify weaknesses more quickly.