Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
XRP XRP Ledger 协议发布紧急更新，修复可能导致无限增发 XRP 的关键溢出漏洞
近日，XRP Ledger（XRPL）协议发布了一项紧急更新，以解决其支付引擎中发现的一个关键漏洞。该漏洞若被利用，将对 XRP 的供应量构成严重风险。xrpld 版本 3.4.1 于 2026 年 9 月 25 日推出，旨在修复这一严重的安全隐患。此前，攻击者曾试图通过单笔交易凭空制造可花费的新 XRP。
溢出漏洞细节与风险分析
研究人员于 2026 年 9 月 22 日向 XRPL 赏金计划报告了这一漏洞。该缺陷源于支付引擎中的整数溢出问题，攻击者可通过组合精心构造的挂单与一笔支付交易，从而“无中生有”地创建 XRP。
技术层面的问题出现在支付引擎对订单簿中大量挂单进行金额累加时。如果计算结果超过了 XRP 余额允许的最大整数值，系统并未触发错误，而是发生了回绕（wrap-around），导致结果变为一个极小的数字。因此，挂单卖家 individually 收到了正确的付款金额，但买家仅需支付回绕后的总金额。剩余部分相当于“幽灵 XRP”，会被记入买家账户。这些本不该存在的 XRP 表现得如同合法代币，可以被转移、交易或发送至交易所。
Although the XRP Ledger protocol has a built-in invariant checking mechanism to prevent the addition of XRPs to transactions, the security system failed to detect this abnormal increase because the value after the overflow logically simulated the behavior of the actual total. Although the vulnerability has existed since the current payment engine architecture was established in 2015, it was not discovered and made public until last month.
Patch deployment and network status
xrpld 3.4.1 introduces an immediate fix for this overflow issue. The security team found no evidence that the vulnerability had been exploited on public networks, and the existence of the vulnerability has not historically led to an unexpected additional issuance of XRP.
Given the severity of the threat, project maintainers skipped the normal proposal process for the first time since the amendment framework was introduced more than a decade ago. This measure ensures that the fix will take effect immediately with the release of v3.4.1, without the need for a consensus vote by node operators. Currently, XRPL server operators have been urged to immediately update to v3.4.1 to stay in sync with the network and prevent attack attempts against this vulnerability.
Meme token boom highlights the importance of market monitoring
Comprehensive monitoring is crucial for all segments of the cryptocurrency market. In the Meme token space, trends can quickly generate huge attention and value. Relevant data shows that in the token case named "Niu Lai", the initial investment of US$99 reportedly grew to approximately US$370,000. Effective regulation involves not only tracking price fluctuations, but also investor timing and token selection. Tools support these needs through features such as social dynamics, investor rankings and transaction notices, allowing users to follow Meme token trends and broader investor activity.
