Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
XRP XRP ledger fixes a critical vulnerability: AI detected a fatal flaw that allows for the creation of 18 trillion XRPs out of nothing.
For over a decade, there has been a serious vulnerability within the XRP ledger (XRPL). If exploited by attackers, this vulnerability could result in the creation of new tokens from nothingness, without being detected by the network’s own detection mechanisms. However, a security startup specializing in artificial intelligence discovered this vulnerability.
After the company identified the vulnerability, the XRP ledger team offered a reward of $250,000 to those who reported it. But not everyone considered this reward to be reasonable. renowned blockchain researcher ZachXBT pointed out that considering the significant potential losses that were avoided through this discovery, the reward amount seemed too low.
Introduction to the XRP ledger
The XRP ledger is a decentralized blockchain network developed by Jed McCaleb, David Schwartz, and Arthur Britto, and it was launched in 2012. These three founders later helped establish OpenCoin, which later became Ripple Corporation.
A blockchain is a digital ledger that can record data that cannot be manipulated, altered, or deleted. Its decentralized nature ensures that it cannot be owned or controlled by any individual or entity. Its immutability means that once data is recorded, it cannot be changed or deleted.
The native cryptocurrency of the XRP ledger is XRP, which is primarily used for paying transaction fees.
The XRP ledger fixes a critical supply vulnerability
10月11日，XRP账本基金会在社交媒体平台X上宣布，最近发布的3.4.1版本已解决一个可能威胁网络1000亿枚代币发行上限的漏洞。该上限自2012年上线之初即已设定。
使用AI代理来识别关键漏洞的公司Veria Labs发布了其调查结果。该公司表示，其自动化安全测试系统于9月21日发现了该漏洞。Veria Labs联合创始人Cayden Liao与Veria AI共同发现，通过特定交易操作，理论上可创建约18万亿枚XRP。这一数字约为XRP总供应量1000亿枚的184倍。
Liao于9月22日通过官方XRPL漏洞赏金计划提交了这一发现。工程师确认该漏洞后，XRP账本团队于两周前通过3.4.1版本修复了这一安全隐患。
团队表示，没有新的XRP被创建，供应量已固定为1000亿枚。他们同时指出，由于触发该漏洞需要极其大规模的操作，因此该漏洞多年来一直未被发现。“普通的支付交易根本不会触发它，需要数百个精心构造的操作才能激活。”
ZachXBT批评XRP账本“廉价支付”25万美元
XRP账本向报告该漏洞的Cayden Liao发放了25万美元的奖励。然而，这一金额引发了ZachXBT的强烈反应。他认为，对于白帽黑客发现关键漏洞给予如此微薄的奖励，是一种 discouraging（令人沮丧）的行为。
ZachXBT在X上发帖写道：“当你们的国库拥有数十亿美元时，却只花‘小钱’25万美元打发白帽黑客，以应对一个可能导致无限XRP增发的关键漏洞？这就是人们不将XRPL或Ripple视为严肃组织的原因。”
这位链上侦探警告称，下次如果遇到类似情况，攻击者可能会利用XRP账本协议获取高达九位数的收益，而不会出于善意进行报告。
