XRP Ledger Foundation Confirms Fix for Supply-Cap Vulnerability

The XRP Ledger Foundation confirmed Sunday that a critical payment-engine vulnerability was fixed before it was exploited and that no additional XRP was created, preserving the network’s fixed supply limit.

The flaw could have allowed an attacker to bypass the XRP Ledger’s 100 billion XRP cap. It was patched in version 3.4.1 about two weeks ago, and the ledger currently contains approximately 99.986 billion XRP.

Exploitation would have required hundreds of deliberately crafted operations, making it highly unlikely to occur during ordinary payment activity. The vulnerability had existed in the code for more than 10 years and was identified by Veria AI through Ripple’s bug bounty program before exploitation.

Version 3.4.1 became mandatory after following the network’s standard amendment voting process and receiving support from more than 80% of validators for two consecutive weeks. The XRP Ledger Foundation, RippleX, core developers and validators coordinated the response, and plan to expand formal verification, AI adversarial testing, security research and bug bounty efforts.