XRPL fixes decade-old payment engine flaw that could have inflated XRP supply

XRPL fixes decade-old payment engine flaw that could have inflated XRP supply

N
News Editor
2026-10-11 00:41:00
RippleX engineering lead J. Ayo Akinyele said a critical flaw in the XRP Ledger payment engine had existed for more than a decade and could have allowed XRP to be minted beyond its fixed supply cap. The issue was reported by Veria AI and identified through a bug bounty program, according to PANews. Akinyele said the vulnerability had not been exploited. The development team has released xrpld 3.4.1 to patch the problem and coordinated validators to complete a network upgrade before the issue was publicly disclosed. He also said AI is speeding up vulnerability discovery, prompting XRPL to increase proactive security spending, reduce technical debt, advance formal verification, and work through latent risks in older code. The disclosure centers on core payment engine logic rather than an application-layer bug, making it a notable security incident for the network even though no exploitation was reported.

PANews reported on Oct. 11 that RippleX engineering lead J. Ayo Akinyele disclosed a critical flaw in the XRP Ledger (XRPL) payment engine that had been present for more than 10 years and could have enabled XRP to be issued beyond its fixed supply limit.

The issue was reported by Veria AI and was discovered through a bug bounty program. Akinyele said the vulnerability had not been exploited.

The development team has released xrpld 3.4.1 as a fix. Before making the issue public, the team also coordinated with validators to complete a network upgrade.

Next security steps

Akinyele said AI is accelerating the pace of vulnerability discovery. In response, XRPL plans to increase proactive security investment, clean up technical debt, push forward with formal verification, and systematically remove latent risks from older code.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
800

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.