News linked to both this project and an event.
Odaily Report: On-chain detective ZachXBT retweeted the XRP Ledger Foundation's explanation regarding a previous critical security vulnerability and criticized its bug bounty mechanism.ZachXBT stated that XRPL, which holds billions of dollars in assets, only paid a $250,000 reward to the white hat hacker who discovered the critical vulnerability. He believes that this level of reward could weaken security researchers' incentive to proactively report vulnerabilities, and may even encourage attackers to exploit vulnerabilities for massive gains rather than responsibly disclosing the issue.Previously, the XRP Ledger Foundation confirmed that the vulnerability could theoretically bypass the XRP total supply limit, but no additional XRP was found to have been created as a result, and the vulnerability has been fixed through version 3.4.1.
Odaily News: The XRP Ledger Foundation posted on the X platform to clarify the recent XRP Ledger security vulnerability incident, stating that the vulnerability could potentially have been used to bypass the limit that fixes XRP's total supply at 100 billion, but it was fixed two weeks ago via version 3.4.1. Furthermore, upon verification, no new XRP was found to have been created, and the total amount of XRP currently circulating on the ledger is approximately 99.986 billion.The Foundation stated that the vulnerability would have required hundreds of deliberately constructed operations to trigger, and normal payment transactions would almost never involve it. In the future, it will strengthen formal verification, AI adversarial testing, security research collaboration, and bug bounty programs with RippleX and the community. Regarding the fix process, the Foundation explained that publicly releasing a patch could allow attackers to use AI to accelerate vulnerability analysis. To address this situation, the XRPL community engaged in coordination. Participating parties including the XRP Ledger Foundation, RippleX, core developers, and validators reached a social consensus and agreed to adopt the approach of directly releasing the fix. In addition, version 3.4.1 only became a version the network was required to adopt after going through the normal amendment voting process and receiving support from more than 80% of validators for two consecutive weeks. Protocol changes still need to be completed through the amendment mechanism.Previously, RippleX engineering lead J. Ayo Akinyele also posted on the X platform, stating that he attaches great importance to the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine. This vulnerability is a serious security issue that has existed in the codebase for more than 10 years and could theoretically lead to the over-creation of XRP, breaking through the fixed supply cap. However, before the vulnerability could be exploited, it was discovered by the security research firm Veria AI through Ripple's bug bounty program.
Odaily News: J. Ayo Akinyele, Engineering Lead at RippleX, posted on X platform stating that they take the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine very seriously. The vulnerability is a severe security issue that has existed in the codebase for over 10 years and could theoretically lead to the over-creation of XRP, breaching the fixed supply cap. However, the vulnerability was discovered by security research firm Veria AI through Ripple's bug bounty program before it could be exploited.J. Ayo Akinyele further added that the Ripple team quickly developed and tested a fix, working closely with validator nodes to complete the network upgrade, and patched the vulnerability before its public disclosure. Currently, AI is changing the speed of vulnerability discovery, and XRPL needs to further enhance its security response capabilities. RippleX will strengthen its bug bounty program, expand AI-assisted vulnerability hunting and adversarial testing, review long-standing code in the payment engine, consensus mechanism, and P2P network, while advancing formal verification of critical modules and reducing potential risks through systematic security hardening. The goal is not just to fix a single vulnerability, but to identify and eliminate potential risks in XRPL's legacy code, making the network more difficult to attack.
Ripple与XRP Ledger基金会（XRPLF）联合成立新组织XRP Asia，旨在推动亚太地区XRP Ledger（XRPL）生态发展，总部位于新加坡，由前Hedera基金会亚太及金融科技/支付业务负责人Sabrina Tachdjian领导，该组织将支持开发者培训、黑客松、合作伙伴计划、创业支持以及生态活动，并对接基础设施服务商、孵化及资助项目，以及连接投资者和生态合作伙伴。