The XRP Ledger harbored a subtle coding error that allowed numeric values to wrap around once they exceeded the system’s maximum size. In practice, this meant that a transaction’s cost could collapse to a negligible amount while the recipient still received the full amount owed, effectively generating new XRP out of thin air.
How the exploit could have functioned
To activate the flaw, an attacker would need to orchestrate a large series of specially designed operations. By posting fictitious token sales with astronomically high values and then acting as the buyer, the attacker could cause the ledger to credit the seller accounts with billions of XRP while paying only a tiny fraction. The excess tokens would inflate the total supply beyond the immutable 100 billion limit set at launch.
Discovery and remediation
Security researcher Cayden Liao, together with Veria AI, identified the issue on Sept. 22 and alerted the XRP Ledger Foundation. RippleX quickly examined the code, found no signs of the bug being exploited on the public network, and deployed a fix. The current circulating supply remains around 99.986 billion XRP, indicating that the vulnerability has not been used to create additional coins.
Strengthening future defenses
The foundation noted that the flaw went undetected because ordinary user activity never approaches the scale required to trigger it, and built-in checks missed the anomaly due to the same miscounted total. Going forward, the team plans to employ adversarial AI testing, formal verification methods, and a more robust bug bounty program to uncover similar edge-case bugs before they can be weaponized.
Why it matters
The XRP Ledger’s promise of a fixed supply underpins its value proposition as a bridge currency and fee-payment medium. An unchecked ability to mint new tokens would have undermined confidence in the network, potentially destabilizing markets that rely on XRP’s scarcity. The swift patch demonstrates the ecosystem’s capacity to respond to deep-technical threats, while the announced security upgrades aim to protect other layer-1 platforms from comparable oversights.
