Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
XRP AI technology may accelerate vulnerability exposure, XRP Ledger's major hidden dangers trigger open source transparency controversy
RippleX engineer Mayukha Vadari warned that artificial intelligence (AI) may be used by attackers to reverse engineer security patches to identify critical blockchain vulnerabilities. Previously, Veria Labs discovered an XRP Ledger (XRPL) vulnerability. If maliciously exploited, attackers could manipulate transactions to create 18.45 trillion XRPs out of thin air. Although XRPL developers released emergency security updates, they temporarily withheld source code during release, a move that raised community concerns about transparency and open source development practices.
AI-enabled attacks: Security patches are no longer "charms"
RippleX engineer Mayukha Vadari pointed out that with the development of artificial intelligence technology, attackers 'ability to reverse engineer software updates and mine potential security weaknesses has been significantly enhanced. She emphasized that developers can no longer rely on traditional public release methods to fix critical security issues. Current AI capabilities allow malicious actors to quickly locate and identify vulnerabilities by analyzing patches before network operators complete necessary upgrades.
The background of this warning is a recent disclosure of a flaw in the XRP Ledger payment engine. The flaw has been lurking in network code since 2015 and was only recently revealed.
Detailed explanation of XRP Ledger supply vulnerability: 18.45 trillion XRP crisis
9月21日，Veria Labs的研究人员利用其基于AI的安全系统Veria AI发现了这一漏洞，并于次日通过XRP Ledger的漏洞赏金计划提交了 findings（发现结果）。
根据Veria Labs的分析，攻击者可以利用此缺陷，通过单笔交易生成约18.45万亿枚XRP。这一数量超过了XRP最初设定的1000亿枚代币上限的184倍以上。
该漏洞涉及XRP Ledger支付引擎中的整数溢出问题，特别是在涉及多个交易报价的去中心化交易所交易中表现明显。攻击者可以创建数百个包含异常大额XRP值的操纵性报价，从而触发错误的支付计算。结果是，卖家可能收到巨额的XRP付款，而买家仅需支付所需金额的一小部分。
此外，该缺陷还影响了旨在防止未经授权创建XRP的保护机制，可能导致攻击者转移新生成的代币。研究人员估计，如果漏洞被利用，可能会威胁到XRP当时约940亿美元的市场市值。不过，XRPL开发者表示，目前在公共网络上未发现任何被利用的证据。
紧急更新与开源透明的矛盾
为了在披露技术细节前解决这些安全弱点，开发者于9月25日发布了xrpld 3.4.1版本。然而，团队暂时保留了安全补丁的源代码，以防止攻击者通过逆向工程识别底层漏洞。这一决定因缺乏透明度以及对其对开源开发承诺的质疑而受到批评。
Vadari's warning highlights the challenges faced by developers: As AI accelerates vulnerability detection and analysis in blockchain networks, how to quickly deploy protection updates while protecting sensitive security fix information has become a challenge. The incident also explains why in some cases, developers may need to restrict immediate access to sensitive security fixes to ensure network operators can successfully deploy protective updates.
