XRP Ledger Fixes Payment Engine Vulnerability With No Exploitation Found

The XRP Ledger fixed an integer-overflow vulnerability in its payment engine on Sept. 25, addressing a flaw that affected xrpld version 3.4.0 and earlier releases. The fix shipped with xrpld 3.4.1. More than 80% of default UNL validators were running version 3.4.1 or later on Sept. 25. The vulnerability required specially constructed offers and a payment designed to consume them. If exploited, it could have created spendable XRP. Normal payments could not trigger the flaw accidentally. No evidence showed that the issue had been exploited on any public network.

Source: TokenPost