XRP Ledger defends emergency patch for unlimited XRP bug
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
XRP Ledger developers issued an emergency security patch on September 25 to fix a bug that could have allowed the creation of unlimited XRP, bypassing the usual two-week validator vote process. They defended this move as necessary to avoid exposing the flaw to attackers. The fix was coordinated by the XRPL Foundation, RippleX, core developers, and validators, who insisted no single party made the decision alone.
Why it matters
The emergency patch raises questions about the XRP Ledger’s decentralization claims, as it was the first deliberate bypass of the normal amendment process in over ten years. Critics argue this coordination suggests centralized control, which is significant because decentralization is central to arguments claiming XRP is not a security.
Key context
The bug, present since 2015, was an integer overflow in the XRP Ledger’s payment engine that could have allowed attackers to mint unlimited XRP by exploiting specially priced offers. The issue required deliberately crafted transactions and could not be triggered by normal trading. Developers found no evidence the bug was exploited on public networks.
Key numbers and entities
Key entities include the XRP Ledger developers, XRPL Foundation, RippleX, independent validator operator XRP Kuwait, and Cyber Capital founder Justin Bons. The bug was a 64-bit integer overflow issue affecting XRP balance calculations since 2015. The emergency fix version was 3.4.1.
What remains unclear
The source does not specify the total number of validators who installed the emergency patch upon release or any long-term impacts on network governance structures. It is also unclear whether any comprehensive independent audits will follow to assess the Ledger’s decentralization claims after this incident.