XRP Ledger Patches Decade-Old Flaw That Could Create Spendable XRP

XRP Ledger developers have disclosed a critical vulnerability that could have allowed an attacker to create spendable XRP from nothing, bypassing safeguards designed to prevent the cryptocurrency's supply from increasing. The payment engine vulnerability was reported through the XRPL Bug Bounty program on September 22 by Cayden Liao and Veria AI. RippleX engineers reproduced the exploit on a standalone server, confirmed that the newly created XRP could be spent in a subsequent payment and raised its severity from major to critical. There is no evidence the vulnerability was exploited on any public XRP Ledger network.