Back Kucoin

XRP Ledger Patches 10-Year-Old Vulnerability That Could Mint Billions of XRP

Kucoin • October 10, 2026

The XRP Ledger recently fixed a critical security vulnerability dating back to 2015. The vulnerability was discovered by researcher Cayden Liao and Veria AI and internally reported on September 22. Attackers could exploit a counter overflow flaw in the ledger’s built-in exchange by creating hundreds of accounts, allowing them to artificially generate and transfer large amounts of XRP at minimal cost, thereby bypassing the fixed supply cap of 100 billion XRP. RippleX quietly released the patched version xrpld 3.4.1 on September 25 and stated that there is currently no evidence of exploitation on any public network.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

XRP Ledger Vulnerability Could Have Minted 18 Trillion Tokens A critical vulnerability in the XRP Ledger, discovered by Veria AI, could have allowed attackers to create up to 18 trillion XRP tokens, significantly exceeding the cryptocurrency's fixed supply of 100 billion. The flaw, stemming from an integer overflow in the payment engine, was reported on September 22, 2026, and patched on September 25, 2026. RippleX confirmed that no evidence of exploitation was found on public networks. The vulnerability had existed since 2015, raising concerns about the integrity of XRP's supply cap and the effectiveness of existing security measures. The incident has prompted discussions regarding governance and security protocols within the blockchain community. The market capitalization of XRP was approximately $94 billion at the time of the discovery, emphasizing the potential financial impact of the flaw. The patch was released without public source code, leading to criticism regarding transparency. RippleX is now focusing on enhancing its security measures in response to this incident. 38 sources 58

XRP Ledger Patches 10-Year-Old Vulnerability That Could Mint Billions of XRP

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (1)