{"id":14363,"date":"2026-10-12T07:21:47","date_gmt":"2026-10-12T07:21:47","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=14363"},"modified":"2026-10-12T07:21:47","modified_gmt":"2026-10-12T07:21:47","slug":"critical-xrp-ledger-bug-could-have-allowed-xrp-to-be-minted-from-nothing","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=14363","title":{"rendered":"Critical XRP Ledger Bug Could Have Allowed XRP to Be Minted From Nothing"},"content":{"rendered":"

<\/p>\n

\n
\n
\n
    \n
  • An integer overflow in the XRP Ledger\u2019s payment engine could have let an attacker create spendable XRP, according to a disclosure report published on 9 October.<\/span><\/li>\n
  • The fix shipped in xrpld 3.4.1 on 25 September without a validator vote, a first since amendments began more than ten years ago.<\/span><\/li>\n
  • Veria Labs, which reported the flaw, says a single transaction could have created 18 trillion XRP and that it received the maximum US$250,000 bounty.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n

    XRP Ledger developers disclosed on 9 October a flaw in the network\u2019s payment engine, dating to 2015, that could have let an attacker mint XRP from nothing.<\/p>\n

    They found no evidence that it was exploited on any public network, the disclosure report states. Their fix went out in xrpld 3.4.1, the ledger\u2019s server software, on 25 September. The bug sat where the engine adds up amounts in a single payment that consumes many order-book offers.\u00a0<\/p>\n

    XRP amounts in that sum are integers with a fixed maximum, and a total past that limit wrapped around to a small number. The engine then paid each offer owner in full but charged the buyer only the wrapped total.<\/p>\n

    A built-in safety check meant to confirm that no transaction creates XRP summed balance changes the same way. It wrapped around identically and caught nothing.<\/p>\n

    Read more: OpenAI Executive Apologises Over Botched Handling of Australian Data Incidents<\/strong><\/p>\n

    Found Through the Bug Bounty<\/h2>\n

    A researcher filed the flaw through the XRPL Bug Bounty programme on 22 September, and the report credits Cayden Liao and Veria AI. Ripple\u2019s engineering arm, RippleX, reproduced the flaw the same day and raised its severity to critical.<\/p>\n

    Veria Labs says its AI agent found two overflows and chained them into a working exploit on a local network. By Veria\u2019s count, a single transaction could have created 18 trillion XRP, 184 times total supply. Veria says it received the programme\u2019s maximum US$250,000 (AU$357,500) bounty.<\/p>\n

    The attack needed only a few hundred XRP in reserves plus fees, the report notes. It also required hundreds of offers priced in a way no real trader would use.<\/p>\n

    Changes to transaction processing normally ship as amendments, which take effect\u00a0 only after more than 80% of trusted validators back them for two weeks. This fix applied on each server as soon as it was upgraded.<\/p>\n

    Because xrpld is open source, a fix waiting on a vote would have exposed the bug for weeks while it stayed exploitable, the report says. More than 80% of validators on the default list ran 3.4.1 on release day, before its source code was published.<\/p>\n

    They added that amendments remain the rule, with this route kept for the most severe bugs. Their security model layers audits and public contests, such as Ripple\u2019s US$200,000 (AU$286,000) attackathon on the lending protocol, on top of the bounty.<\/p>\n

    Read more: Bitcoin Falls Below $83K as US Government Moves $332M in BTC to Coinbase Prime<\/strong><\/p>\n<\/p><\/div>\n

    Ledger#Critical #XRP #Ledger #Bug #Allowed #XRP #Minted1791789707<\/p>\n","protected":false},"excerpt":{"rendered":"

    An integer overflow in the XRP Ledger\u2019s payment engine could have let an attacker create spendable XRP, according to a disclosure report published on 9 October. The fix shipped in xrpld 3.4.1 on 25 September without a validator vote, a first since amendments began more than ten years ago. Veria Labs, which reported the flaw,<\/p>\n","protected":false},"author":1,"featured_media":14364,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[4882,4425,158,829,7362,230],"class_list":["post-14363","post","type-post","status-publish","format-standard","has-post-thumbnail","category-bitcoin","tag-allowed","tag-bug","tag-critical","tag-ledger","tag-minted","tag-xrp"],"yoast_head":"\nCritical XRP Ledger Bug Could Have Allowed XRP to Be Minted From Nothing - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=14363\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Critical XRP Ledger Bug Could Have Allowed XRP to Be Minted From Nothing\" \/>\n<meta property=\"og:description\" content=\"An integer overflow in the XRP Ledger\u2019s payment engine could have let an attacker create spendable XRP, according to a disclosure report published on 9 October. The fix shipped in xrpld 3.4.1 on 25 September without a validator vote, a first since amendments began more than ten years ago. Veria Labs, which reported the flaw,\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=14363\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-12T07:21:47+00:00\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14363\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=14363\",\"name\":\"Critical XRP Ledger Bug Could Have Allowed XRP to Be Minted From Nothing - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14363#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14363#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/xrp-ledger-minted.jpg\",\"datePublished\":\"2026-10-12T07:21:47+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14363#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=14363\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14363#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/xrp-ledger-minted.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/xrp-ledger-minted.jpg\",\"width\":1920,\"height\":1072},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14363#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Critical XRP Ledger Bug Could Have Allowed XRP to Be Minted From Nothing\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto & Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Critical XRP Ledger Bug Could Have Allowed XRP to Be Minted From Nothing - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=14363","og_locale":"en_US","og_type":"article","og_title":"Critical XRP Ledger Bug Could Have Allowed XRP to Be Minted From Nothing","og_description":"An integer overflow in the XRP Ledger\u2019s payment engine could have let an attacker create spendable XRP, according to a disclosure report published on 9 October. The fix shipped in xrpld 3.4.1 on 25 September without a validator vote, a first since amendments began more than ten years ago. Veria Labs, which reported the flaw,","og_url":"https:\/\/cryptonews.uk.com\/?p=14363","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-10-12T07:21:47+00:00","author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=14363","url":"https:\/\/cryptonews.uk.com\/?p=14363","name":"Critical XRP Ledger Bug Could Have Allowed XRP to Be Minted From Nothing - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=14363#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=14363#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/xrp-ledger-minted.jpg","datePublished":"2026-10-12T07:21:47+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=14363#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=14363"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=14363#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/xrp-ledger-minted.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/xrp-ledger-minted.jpg","width":1920,"height":1072},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=14363#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Critical XRP Ledger Bug Could Have Allowed XRP to Be Minted From Nothing"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto & Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/14363","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14363"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/14363\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/14364"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14363"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14363"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14363"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}