Decade-Old XRP Ledger Flaw Could Have Allowed Unlimited XRP Creation
A vulnerability in the XRP Ledger's code remained undiscovered for roughly a decade and could have allowed a single attacker to generate XRP beyond the existing 100 billion supply. No user funds were affected, and a patch was released on September 25. The remedy, however, altered a longstanding network rule.
The flaw remained hidden in the XRP Ledger's code for about ten years. If exploited, a lone attacker could have generated XRP beyond the roughly 100 billion tokens already in existence. No user funds were affected, and a patch arrived on September 25.
The remedy changed a rule that had long governed the network. That detail indicates the fix was not simply a routine software update. The case underscores how older code in financial systems can conceal serious vulnerabilities for years.
If such a flaw had gone unpatched, holders and exchanges relying on XRP's stated supply could have faced uncertainty about scarcity and value. The disclosure may prompt other blockchain projects to audit old code and review governance rules. For everyday users, the main effect could be renewed attention to how digital asset networks handle hidden bugs and upgrades, though the reported absence of lost funds may limit immediate public concern.