XRP Ledger Fixes Vulnerability Allowing XRP to Be Created Out of Thin Air
Start here
AI-assisted source synthesis · not an independent investigation.
A report dated October 10, 2026, stated that XRP Ledger fixed a vulnerability in xrpld 3.4.1 that could have allowed attackers to create and spend XRP out of thin air. The vulnerability is believed to date back to 2015 and stemmed from a counting error in the built-in exchange, potentially causing hundreds of accounts to receive large amounts of XRP while the buyer paid almost nothing. RippleX stated that it had not found evidence that the vulnerability had ever been exploited on the public network. The fix was released on September 25.
AI-written from reports · updated 9 days ago
Timeline
Follow the reporting to see the different sides of the story.
- CoinDeskXRP Ledger fixes a ten-year vulnerability that could mint XRP out of thin air
XRP Ledger fixed a vulnerability in xrpld 3.4.1 that could have allowed attackers to create and spend XRP out of thin air. The vulnerability is believed to date back to 2015 and used a counting error in the built-in exchange to let hundreds of accounts receive large amounts of XRP while buyers paid almost nothing; RippleX said it found no evidence that the vulnerability had been exploited on the public network. The fix was released on Sept. 25.