A severe logic flaw within the XRP Ledger (XRPL) codebase was narrowly averted this month, a recent blog post states
Security researchers discovered a vulnerability that could have allowed attackers to drain user wallets without needing their private keys.
The bug, which was spotted in the proposed “Batch” amendment (XLS-56), was identified earlier this month by independent researcher Pranamya Keshkamat and an autonomous AI security tool named Apex
HOT Stories
Critical XRP Ledger Bug in Batch Amendment Could Have Drained User Wallets
Crypto Market Review: XRP Volatility Squeeze is a $2 Recipe, Will Dogecoin (DOGE) Zero Removal Happen in February? Shiba Inu (SHIB) Bullruns Aren’t Possible Yet
The amendment was still in its voting phase and had not been activated on the XRPL mainnet. Hence, no user funds were at risk or lost.
The vulnerability explained
The Batch amendment would allow multiple “inner” transactions to be grouped together.
These inner transactions are intentionally left unsigned in order to save processing power. Instead, authorization is delegated to the outer batch’s list of signers.
A critical loop error caused a major vulnerability in the process of calling signers.
If the system encountered a signer for an account that did not yet exist on the ledger, and the signing key matched that new account, the system immediately declared the validation a success. It then exited the loop early, avoiding validator checks
A specific sequence of batched transactions could have been used by the attacker to exploit the aforementioned vulnerability
Had the Batch amendment been activated on the mainnet before this discovery, the XRPL ecosystem would have potentially suffered a severe blow. An attacker could have stolen funds, modified the ledge state, and destabilized the ecosystem
Earlier this week, developers released the Rippled 3.1.1 reference server software. This emergency patch explicitly marks the Batch amendment as unsupported,
A comprehensive fix that removes the early-exit loop and adds tighter authorization guards has been developed. It is currently undergoing rigorous peer review
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Exodus Wallet Expands XRP Ledger Support Through Ripple Partnership, Adds RLUSD
Exodus Movement announced a partnership with Ripple to enhance support for the XRP Ledger in its crypto wallet, allowing users to manage Ripple USD and send XRP assets seamlessly.
GateNews2h ago
Solana and Ripple's 'XRP' Posts Highlight $100M Wrapped XRP Integration
Solana's recent post about "XRP" led to Ripple's reply, influencing XRP's price. This comes amid the launch of wrapped XRP on Solana through Hex Trust and LayerZero, attracting significant liquidity, highlighting an evolving collaboration in the crypto space.
GateNews4h ago
XRP Rises 4% as Ripple Partnership and ETF Inflows Drive Recovery
XRP rose 4% to $1.41, boosted by Ripple's partnership with Kyobo Life and increasing institutional interest. Broader market gains and positive community engagement also contributed, though XRP remains 63% below its peak. Key support is at $1.38.
GateNews8h ago
XRP taps 44 million Rakuten users as Japan loyalty points turn into crypto
Rakuten Wallet has introduced XRP for trading and payments in Japan, allowing 44 million Rakuten Pay users to convert loyalty points into XRP, effectively integrating it into a major consumer commerce network. This move enhances everyday spending and expands XRP's reach in the market.
Cryptonews11h ago
Rakuten Pay Integrates XRP for 44 Million Japanese Users, Enables Payments at 5M+ Merchants
Rakuten Pay has integrated XRP, enabling 44 million users to spend the cryptocurrency at over 5 million merchants in Japan. This integration highlights a shift from trading cryptocurrencies to everyday payments, supported by Japan's favorable regulations and fintech infrastructure.
GateNews04-15 09:14
MoonPay Hints at Potential Ripple Collaboration With XRP-Themed Post
MoonPay's recent social media post featuring an XRP theme has sparked speculation about a potential partnership with Ripple. As both companies focus on enhancing cryptocurrency infrastructure, the implications of this possible collaboration, along with Ripple's initiatives in institutional finance, highlight a shift towards practical applications in the crypto space.
GateNews04-15 08:53
