Ripple Warns About AI Threat Following Bug That Could Have Created Billions of XRP

Ripple Urges Vigilance Amid AI-Driven XRP Vulnerability

Introduction

The discovery of a critical vulnerability in XRP Ledger (XRPL) has sparked concerns about the security of the cryptocurrency. The vulnerability, identified by Veria AI, could have allowed attackers to mint billions of XRP from thin air.

Background

The vulnerability was present for a decade and was identified on September 21. Researchers filed a bug report through the XRP Ledger bug bounty program, and Veria Labs estimated that the vulnerability could have impacted the whole market cap of XRP, which they estimated at around $94 billion when they filed the report.

Analysis

The vulnerability was caused by an integer overflow in XRP Ledger's payment engine. The issue was traced back to the code that was added in 2015 and pertained to the method of calculating payment amounts for processing multiple offers on the network through the decentralized exchange.

Conclusion

Ripple has taken steps to address the issue by releasing an emergency update. However, the move has raised concerns about the open-source nature of the network. The development team has released an emergency update - xrpld 3.4.1 - on September 25, but has kept the source code of the update with security fixes in abeyance for now.