Home / Technology / XRP Ledger Fixes "Money Printer" Bug
XRP Ledger Fixes "Money Printer" Bug
11 Oct
Summary
- A critical bug in XRP Ledger's payment engine could have created unlimited counterfeit XRP.
- The vulnerability was present since 2015 and fixed via an emergency software release.
- This fix bypassed the usual validator vote to prevent exploitation.
The XRP Ledger has successfully patched a critical bug within its payment engine that posed a significant security risk. This vulnerability, discovered to have existed since 2015, could have enabled attackers to generate counterfeit XRP beyond the network's fixed supply. The exploit involved an integer overflow, where a single transaction could cause the system to wrap around and create vast amounts of unbacked currency.
Researchers reported the bug on September 22nd, and RippleX, Ripple's developer arm, confirmed its severity. An emergency release, xrpld 3.4.1, was deployed on September 25th to address the issue, alongside a less severe bug affecting the Batch feature. This critical fix was implemented without a validator vote, a deviation from standard procedure, to immediately secure the network and prevent potential exploitation.
While the vulnerability could have theoretically minted XRP valued at nearly $88 billion, there is no evidence of it being exploited on public networks. The fix was pushed via an unannounced upgrade to servers, a measure deemed necessary to avoid a prolonged exploitation window. This incident highlights ongoing security challenges within the cryptocurrency space, with other networks like Zcash and the Liquid Network experiencing similar money-printing bugs.
