XRP Ledger Patches Flaw That Could Have Created XRP Beyond 100 Billion Supply

The XRP Ledger patched a payment-engine vulnerability that could have let attackers create and spend XRP beyond the network’s intended 100 billion-token supply. The flaw affected xrpld 3.4.0 and earlier and was fixed in version 3.4.1, released Sept. 25. It was reported through the ledger’s bug-bounty program on Sept. 22 after researchers demonstrated the attack on a standalone server. An attacker could have used hundreds of deliberately mispriced order-book offers in one payment. An integer overflow could cause sellers to receive large XRP credits while the buyer paid only a much smaller amount.

Source: TokenPost