XRP Ledger Discloses Two Vulnerabilities Fixed in xrpld 3.4.1

The XRP Ledger disclosed two vulnerabilities fixed in xrpld 3.4.1, including a payment-engine arithmetic flaw that could have created spendable XRP if exploited. The disclosure published Oct. 9 identified one bug involving validation of Batch inner-transaction wrappers and another involving XRP overflow in the payment engine. No mainnet funds were affected by the Batch issue, and no evidence showed that the overflow vulnerability had been exploited on a public network. The XRP Ledger released xrpld 3.4.1 as an emergency security update on Sept. 25. The release introduced the fixBatchV1_2 amendment and included security and stability fixes.