XRPL — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
February 16, 2026
Last Seen
August 2, 2026

XRPL is a technology platform tracked by ThreatCluster, appearing in 3 threat clusters built from 4 intelligence report mentions.

XRPL is a technology platform tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed February 16, 2026; most recent activity August 2, 2026.

Related Threat Clusters

  • XRPL Vulnerabilities: Permission Delegation and Batch Amendment Bugs

    Two critical vulnerabilities were reported in the XRPL system affecting different amendments. The first, identified on September 15, 2025, involved the Permission Delegation feature, allowing unauthorized transaction…

    2 articles · Updated August 2, 2026
  • Ripple Developers Release Security Patch for Amendment Bug

    Ripple developers launched a security patch, Rippled 3.1.1, to address a critical vulnerability related to the Batch transaction type (XLS-56). This patch disables the affected transaction type to enhance security for…

    1 article · Updated February 26, 2026
  • Coordinated Scam Targets XRPL Users with Phishing Tactics

    Wietse Wind, founder of Xaman Wallet, reported a coordinated scam targeting XRPL users involving fake sign requests, phishing emails, and impersonation accounts. The scam is characterized by social engineering attacks…

    3 articles · Updated February 17, 2026

Recent Intelligence Reports

  • Vulnerabilitydisclosurereport Bug Sep2025 — xrpl.org · August 2, 2026
  • Vulnerabilitydisclosurereport Bug Feb2026 — xrpl.org · August 2, 2026
  • Ripple News: Developers Launch Security Patch to Fix Crucial Amendment Bug — Mexc · February 26, 2026
  • Protect Your XRP: 6 New Phishing Tactics Identified by XRPL Contributor Wietse Wind — U.Today · February 16, 2026

Frequently asked questions

What is XRPL?

XRPL is a technology platform tracked by ThreatCluster, appearing in 3 threat clusters built from 4 intelligence report mentions.

Is XRPL still active?

The most recent intelligence report mentioning XRPL on ThreatCluster is dated August 2, 2026. Activity was first observed February 16, 2026, giving a tracked span from then to August 2, 2026.

What is XRPL associated with?

Across ThreatCluster reporting, XRPL most frequently co-occurs with Phishing, Zero-day Exploit, Cantina AI, X, CWE-287 - Improper Authentication, among 12 tracked related entities.

What are the latest developments involving XRPL?

The most significant recent cluster is “XRPL Vulnerabilities: Permission Delegation and Batch Amendment Bugs” (2 articles · Updated August 2, 2026). XRPL appears across 3 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on XRPL?

XRPL appears in 4 intelligence report mentions across 3 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown