XRP Ledger discloses a decade-old bug that could have created XRP from nothing
- Bounty paid
- $250K
- Veria Labs says, the program maximum
- Bug likely present since
- 2015
- Validators upgraded
- 80%+
- on fix release day, 25 September
The XRP Ledger published a disclosure on 9 October for a payment engine bug fixed in xrpld 3.4.1. An integer overflow let a crafted set of offers and one payment create new, spendable XRP far beyond the total supply.
The report says the ledger's 'no XRP created' check used the same unchecked maths, so it missed the error. The flaw likely dates to 2015, and developers found no evidence it was exploited on any public network.
Cayden Liao of Veria Labs reported the bug on 22 September, and the report credits him and Veria AI. RippleX shipped the fix on 25 September. Liao said on X that Ripple paid the maximum $250,000 bounty, ForkLog reported.