Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
XRP RippleX工程师警告：AI进步加剧加密货币安全威胁，十年漏洞曾致940亿美元资产面临风险
RippleX工程师Mayukha Vadari对人工智能快速发展背景下加密货币面临的新兴安全威胁表示担忧。这一警告紧随XRP分类账（XRPL）披露一项关键漏洞之后，该漏洞曾使网络面临被非法铸造数万兆枚XRP代币的风险。
AI在区块链安全中暴露新风险
Vadari在X平台上分享了相关见解，强调人工智能工具现在使攻击者更容易检测、逆向工程并利用区块链系统中的漏洞。他指出：“随着人工智能的发展，情况已经改变。你无法像以往那样在常规公开发布过程中悄悄修补关键错误，因为你会立刻被发现并遭到逆向工程。”
他的评论是在一项潜伏在XRP Ledger中近十年的重大漏洞被公开披露后作出的。一旦触发，该缺陷可能会通过允许创建远超平台1000亿枚XRP固定供应量的新代币，严重扰乱XRP生态系统。
漏洞的发现与报告
2021年9月21日，Veria Labs推出的基于人工智能的安全解决方案Veria AI发现了这一漏洞。次日，其研究人员向XRP Ledger漏洞赏金计划提交了漏洞报告。
据Veria Labs称，这一安全缺陷允许单笔交易铸造高达18.45万亿枚XRP。这一数字是网络授权原始总供应量（1000亿枚）的184倍以上。
If exploited, attackers could transfer newly minted XRP to various exchanges, threatening the integrity of the entire market value. Researchers estimated that at the time of the breach's disclosure, the market value was approximately $94 billion.
Terminology:
Veria AI-an advanced artificial intelligence-driven security system developed by Veria Labs that focuses on proactive threat detection and vulnerability assessment in blockchain networks.
To date, XRPL developers have not found any evidence that the vulnerability was being exploited on the public blockchain.
How the vulnerability works
This problem stems from the code introduced in XRPL in 2015. It affects the way the ledger handles multiple quotes for XRP transactions on its decentralized exchanges (DEX). Specifically, the flaw allows attackers to create hundreds of unusual trading quotes with exaggerated XRP values.
If these quotes are processed together, the system's 64-bit integer calculations may overflow. Instead of marking errors and rejecting transactions, the network underestimates the total payment amount, credits the expected value to the seller's account, and charges the buyer only a very small portion of the fee.
Even XRPL's native safeguards, designed to prevent unauthorized creation of new XRPs, are made vulnerable by similar calculation errors.
Urgent updates and open source controversy
In response, the XRPL development team took an unusual remedy. On September 25, they released an emergency update labeled xrpld 3.4.1. It is worth noting that the source code of the fix was not immediately made public. Developers withheld code to prevent possible exploitation during network updates to nodes.
This strategy has attracted criticism from some in the cryptocurrency community because it temporarily restricts access to source code. Opponents argue that restricting code transparency conflicts with the open source principles established by XRPL, although the move is aimed at protecting networks from attacks during critical times.
Artificial intelligence has changed the landscape of blockchain security, making it more difficult to quietly patch critical vulnerabilities. Developers are urging that rapid but sometimes controversial action must be taken to defend against increasingly complex threats to protect crypto assets.
