Potential Exceeding of 100 Billion XRP Issuance Limit, Security Vulnerability Fixed

A security vulnerability that has existed in the XRP ledger for 11 years has been discovered. This flaw raised the possibility that attackers could generate new XRP without proper compensation. The development team fixed this vulnerability, reported on September 22, with an emergency update on September 25, and no evidence of actual exploitation has been found. However, the omission of validator voting during the update process and the delayed release of the technical report have sparked controversy. The vulnerability was due to an integer overflow in the payment engine, occurring during the order processing of the XRPL. If an attacker included multiple sell orders, the payment amount could be miscalculated, allowing XRP to be generated without authorization. After security researchers reported this vulnerability, the development team distributed an emergency software version, xrpld 3.4.1. This update includes a feature that detects and blocks integer overflows during the payment amount summation process. However, the omission of the standard validator voting procedure has been pointed out as problematic, and questions have been raised about the verification of a security issue that had been latent for 11 years being completed in just three days.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.