RippleX Finds No Evidence of Exploitation After XRPL Patch

RippleX disclosed that no evidence of exploitation has been found after developers fixed an XRP Ledger flaw that could have created spendable XRP outside the network’s intended supply rules. The integer-overflow vulnerability affected xrpld 3.4.0 and earlier and was reported through the XRPL Bug Bounty program on Sept. 22. RippleX reproduced the issue on a standalone server and confirmed that newly created XRP could be spent in a later payment. Processing numerous order-book offers could cause the arithmetic to overflow, miscalculating the buyer’s payment while crediting sellers with the full amounts. Developers released xrpld 3.4.1 on Sept.

Source: TokenPost