A critical security flaw dating back to 2015 in the XRP Ledger could have allowed attackers to create billions of dollars worth of unauthorized XRP without paying for it. The vulnerability, rooted in an integer overflow in the payment-processing logic, threatened the network's fixed supply of 100 billion XRP.
Researchers Cayden Liao and Veria AI reported the issue through the XRP Ledger bug bounty program on September 22. RippleX engineers reproduced the exploit and released corrected server software on September 25 in xrpld version 3.4.1, just three days later. Technical details became public on October 9 after operators were given time to upgrade.
The flaw involved payments routed through offers on the network's decentralized exchange. An attacker could establish hundreds of accounts with deliberately mispriced offers, then submit a specially constructed payment that triggered an integer overflow. Under controlled conditions, researchers demonstrated that accounts could receive spendable XRP without corresponding deductions from the initiating account.
Notably, the attack required only several hundred XRP in reserves—not billions—making it disproportionately cheap to attempt. However, RippleX's investigation found no evidence that the vulnerability was exploited on public networks.
The same release also addressed a separate batch-transaction vulnerability associated with the fixBatchV1_2 amendment, which became enabled on mainnet on October 9. RippleX stated it is strengthening its release verification process to prevent regressions of previously reported issues.
The patch reinforces XRP Ledger's core value proposition: a fixed supply with no mining or staking rewards. While the bug's theoretical impact was severe, the absence of mainnet exploitation and the rapid remediation mitigate immediate market concerns.
