A critical vulnerability over 10 years old was discovered in the XRP Ledger, which could have led to excessive issuance of XRP; it has been fixed and the upgrade completed.

PANews October 11 news: In response to the critical vulnerability in the payment engine reported by Veria AI, J. Ayo Akinyele, RippleX engineering lead, said that the XRP Ledger (XRPL) payment engine has had a severe vulnerability for more than 10 years, which could cause XRP to be minted beyond its fixed supply. The vulnerability was discovered through a bug bounty program and has not yet been exploited. The development team has released the xrpld 3.4.1 fix version and coordinated validators to complete the network upgrade before public disclosure. Akinyele said that AI is accelerating the speed of vulnerability discovery, and XRPL will increase proactive security investment, clean up technical debt, advance formal verification, and systematically eliminate potential risks in old code.

PANews October 11 news: In response to the critical vulnerability in the payment engine reported by Veria AI, J. Ayo Akinyele, RippleX engineering lead, said that the XRP Ledger (XRPL) payment engine has had a severe vulnerability for more than 10 years, which could cause XRP to be minted beyond its fixed supply. The vulnerability was discovered through a bug bounty program and has not yet been exploited. The development team has released the xrpld 3.4.1 fix version and coordinated validators to complete the network upgrade before public disclosure. Akinyele said that AI is accelerating the speed of vulnerability discovery, and XRPL will increase proactive security investment, clean up technical debt, advance formal verification, and systematically eliminate potential risks in old code.