RippleX says critical XRPL flaw could theoretically have enabled excess XRP creation, now patched

RippleX engineering lead J. Ayo Akinyele said in a post on X that the company is treating a recently disclosed vulnerability in the XRP Ledger’s payment engine as a serious security issue. According to his statement, the bug had been present in the codebase for more than a decade and, in theory, could have allowed XRP to be created beyond the network’s fixed supply cap. He added that the flaw was discovered before any exploitation took place by security research firm Veria AI through Ripple’s bug bounty program. Akinyele said Ripple quickly developed and tested a fix, then worked closely with validators to complete a network upgrade before the vulnerability was publicly disclosed. He also said AI is changing the speed of vulnerability discovery, which means XRPL needs stronger security response capabilities. Looking ahead, RippleX plans to expand its bug bounty efforts, increase AI-assisted vulnerability hunting and adversarial testing, review long-standing code in the payment engine, consensus mechanism and P2P network, and push formal verification for critical modules. The stated goal is not only to patch one issue, but to identify and remove latent risks in older XRPL code and make the network harder to attack.