XRPL Security Fixes Follow Two Vulnerabilities
AI · First reported 8 Nov, 22:33 · Updated 23:22
The XRP Ledger activated a November 2026 amendment addressing a token-creation loophole after developers had patched a separate payment-engine flaw in September. Ripple said XRP’s fixed supply was not at risk and that neither issue showed evidence of exploitation; the articles also describe ongoing security work and planned upgrades.
- The November 2026 fix closed a permission-delegation loophole that could have let some accounts create tokens without authorization.
- A separate September 2026 payment-engine flaw could theoretically have enabled creation of about 18 trillion XRP in a crafted transaction; RippleX reported no evidence it was exploited on public networks.
- The articles describe expanded audits, AI-assisted reviews and a dedicated red team, alongside a 2027 roadmap of roughly 24 protocol amendments.
Summary written by Lux AI from 2 articles
Key facts
- November 2026 amendment
- fixCleanup3_4_0 addressed a permission-delegation loophole.
- September 2026 flaw
- The payment-engine integer overflow could theoretically have enabled about 18 trillion spendable XRP in one crafted transaction.
- Reported exploitation
- RippleX reported no evidence of exploitation of the September flaw on public networks; Ripple said XRP’s fixed supply was never at risk in the November incident.
- 2027 roadmap
- Roughly 24 protocol amendments are planned.
Source spectrum
Left 0 · Centre 1 · Right 0 of 1 rated sources · +1 unrated
All coverage
Coverage over time
LeftCentreRight
Articles per hour since first reported, by side.
Ownership
- Unknown 100% (2)
Share of the 2 sources by owner type.