Back Kucoin

XRP Ledger Discovers Critical Vulnerability Affecting Over 10 Years, Fixed in xrpld 3.4.1

Kucoin • October 11, 2026

PANews, October 11: In response to a critical vulnerability reported by Veria AI, J. Ayo Akinyele, Engineering Lead at RippleX, stated that the XRP Ledger (XRPL) payment engine has had a severe vulnerability for over a decade that could enable the minting of XRP beyond its fixed supply. The vulnerability was discovered through a bug bounty program and has not been exploited. The development team has released patch version xrpld 3.4.1 and coordinated validator upgrades prior to public disclosure. Akinyele noted that AI is accelerating the pace of vulnerability discovery, and XRPL will increase proactive security investments, address technical debt, advance formal verification, and systematically eliminate potential risks in legacy code.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

XRP Ledger Patches Critical Vulnerability Allowing Creation of New XRP The XRP Ledger (XRPL) patched a critical vulnerability that could have allowed attackers to create new, spendable XRP without funding. This flaw, dating back to 2015, was discovered by researcher Cayden Liao and Veria AI and reported on September 22, 2026. The vulnerability exploited a counting error in the payment engine, potentially enabling attackers to generate billions of XRP by manipulating order books. RippleX confirmed no evidence of exploitation on public networks and released the patch in version 3.4.1 on September 25. Additionally, a second vulnerability affecting the Batch transaction feature was also addressed, which could have disrupted transaction validation but did not affect user balances. Both vulnerabilities were disclosed in a report on October 9, 2026. 13 sources 58

XRP Ledger Discovers Critical Vulnerability Affecting Over 10 Years, Fixed in xrpld 3.4.1

The full story

Extracted Entities

Companies (2)

Platforms (2)