Switch to seedless. Get 30% off with SWITCH30 till Oct 21XRP Ledger bug fixed: Decade-old flaw patched
6.7 Security A decade-old XRP Ledger bug could have let attackers create new XRP beyond the 100 billion cap. The flaw was patched in September 2026, with no evidence of exploitation.
A critical vulnerability in the XRP Ledger's payment system, present since 2015, could have enabled attackers to create and spend new XRP, threatening the cryptocurrency’s fixed supply of 100 billion tokens. The flaw stemmed from a counting error in the built-in exchange, allowing hundreds of accounts to receive large amounts of XRP while the buyer paid almost nothing. Researchers Cayden Liao and Veria AI discovered and reported the bug on September 22. RippleX engineers confirmed the exploit could generate spendable XRP and released a fix in the xrpld 3.4.1 software update on September 25. There is no evidence the vulnerability was exploited on public networks. The issue was quietly patched in September and publicly disclosed in October 2026, underscoring the importance of continuous security reviews in blockchain systems.
