XRP Ledger Discloses and Patches Bug That Could Have Broken Its Supply Cap

The XRP Ledger disclosed on October 9 an integer-overflow vulnerability in its payment engine that could have allowed specially crafted transactions to create spendable XRP beyond the network’s intended supply cap. The disclosure followed an emergency software update released on September 25, with XRPL saying it found no evidence of exploitation on any public network. XRPL released xrpld 3.4.1 as an emergency security update on September 25. The release added overflow checks to payment calculations and strengthened the ledger’s “no-XRP-created” invariant, the control intended to ensure transactions cannot generate XRP. The network publicly detailed the underlying flaw two weeks later.

Also reported by The Defiant, Cryptopress.

Source: Crypto Daily