In a critical security development, the XRP Ledger has patched a severe vulnerability dating back to 2015—nearly a decade old. If exploited, the flaw could have allowed attackers to generate and spend XRP without funding it, potentially breaking the token's fixed supply cap of 100 billion XRP.
Researchers successfully demonstrated the exploit in a controlled environment, prompting an emergency software fix released on September 25.
RippleX has confirmed there is no evidence that the vulnerability was ever exploited on public networks, and the fixed supply of XRP remains intact.
This patch marks a significant security achievement, reinforcing the reliability of the XRP Ledger and underscoring the importance of routine security audits—even for long-standing protocols.