XRP Ledger fixes vulnerability that could generate 18 trillion XRP and pays a $250,000 reward

XRP Ledger fixes a critical vulnerability that could have resulted in the creation of 18 trillion XRP out of thin air and pays a $250,000 reward

The XRP Ledger team has fixed a critical security breach. If exploited, the vulnerability could lead to the unauthorized creation of up to 18 trillion XRPs, protecting the network from potentially catastrophic attacks. Security researcher Cayden Liao discovered the flaw and was awarded a $250,000 bonus for responsible disclosure of the issue.

Significant supply risks discovered

This technical flaw is traced to XRP Ledger's payment engine and is an overflow bug that can generate large amounts of XRPs through carefully constructed transactions. Liao and his team used a proof-of-concept demonstration to show that if used, a single transaction could create 18 trillion XRPs-which far exceeds the network's fixed limit of 100 billion coins.

Since its launch in 2012, XRP Ledger's structural design has been designed to maintain a rigid upper limit of 100 billion XRPs. Unlike other mainstream cryptocurrencies, XRP neither mines nor pledges. As a small amount of XRP is destroyed in each online transaction, transaction fees will gradually reduce the circulation supply.

This newly discovered vulnerability threatens the fixed supply principles that underpin XRP's confidence. Liao said the overflow flaw could undermine the financial integrity of the entire network because it allowed the amount of coins to be spent far more than was originally introduced. To date, developers have not found any public evidence of malicious actors exploiting the vulnerability.

Since its launch, XRP Ledger's fixed supply cap has been a core trust factor. Despite years of rigorous audits, Liao's proof-of-concept revealed that a covert overflow error hidden in code that has not been detected since 2015 could allow attackers to cast XRP more than 180 times the expected total supply.

Given that XRP is one of the world's most valuable cryptocurrencies, successful exploitation could cause serious damage to the confidence and stability of the digital asset market.

Noun explanation: Cayden Liao is a security researcher recognized for identifying major software vulnerabilities in the cryptocurrency network and contributing to blockchain security initiatives through responsible disclosure.

Rapid response and coordinated patch deployment

Developers publicly disclosed the vulnerability after ensuring the security of XRP Ledger and RippleX networks. The flaw was originally reported through the XRPL Vulnerability Bounty Program on September 22, 2026. Within three days, developers deployed emergency updates to upgrade the xrpld node software to version 3.4.1.

Instead of performing the standard two-week validator fix process, the technical team opted for an immediate confidential patch. This allows more than 80% of default validators to update their systems on the same day, reducing risk before details are made public. The team coordinated a public announcement on October 9 after confirming that the network was protected and the utilization window was closed.

Liao's team was awarded up to $250,000 for what was described as an "exceptionally significant security discovery." The vulnerability requires a combination of two previously considered low-risk errors that together lead to the possibility of an attack.

XRP Ledger's audit records and cybersecurity

Over the past few years, the XRP Ledger Foundation has supported ongoing auditing efforts and launched a vulnerability bounty program to encourage responsible reporting of vulnerabilities. To date, more than $1 million has been distributed to security researchers through these initiatives.

The latest incident highlights the continuing importance of timely software updates and strict monitoring in blockchain networks. Verifier node operators play a critical role in maintaining integrity, as rapid upgrades are critical to minimizing the impact of discovered vulnerabilities.

Despite the extreme theoretical risk posed by the vulnerability, no unauthorized creation of XRP was detected and the network avoided any loss or interruption of user funds. As the defects were neutralized, normal network operations were restored.