XRP Ledger Vulnerability Exposed, Foundation Sails Through Controversy

Overview of the Vulnerability

The XRP Ledger Foundation has defended its decision to circumvent the standard XRP Ledger amendment process due to a critical security vulnerability that could have seen trillions of XRP minted by malicious actors.

Background of the Bug

An AI-powered security firm, Veria Labs, uncovered a bug in the XRP Ledger payment engine that is said to have been present since 2015. If exploited, this could have yielded around 18.45 trillion XRP in a single transaction.

Foundation's Response

The XRP Ledger Foundation has stated that all XRP balances are public information, so if any new XRP were minted, it would obviously be visible in the publicly available ledger data.

Addressing Criticism

The foundation has also addressed some of the criticism surrounding the unusual process of releasing this security patch. Typically, when changes are proposed to the XRP Ledger protocol, they would need to be approved by over 80% of the trusted validators for two consecutive weeks before being enacted. However, the XRP Ledger Foundation pointed out that the risk with that process is that it would give potential attackers a window of several weeks to exploit the vulnerability before the fix went live.

Immediate Software Update

Therefore, a coordinated emergency response was carried out between the XRP Ledger Foundation, RippleX, core developers, and validators. Validators received the patched software on Sept. 25, and public binaries were also released on that same day.

Conclusion

The XRP Ledger Foundation has assured that the exploit was never seen on the public network and that the supply of the network is monitored on an ongoing basis. The foundation's swift action has mitigated the risk of unauthorized XRP creation.