EN ▼
Favorites
My Favorites
View All
Market Cap Price 24h%

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

XRP Ledger Foundation confirms that critical vulnerabilities have been fixed and no unauthorized cas

2026-10-12 15:12:13
Bookmark

XRP账本基金会回应严重安全漏洞担忧:未发生未经授权的新币铸造

近日,XRP账本基金会(XRP Ledger Foundation)就一起严重的网络安全漏洞事件公开作出回应。该漏洞若被恶意利用,可能导致攻击者凭空铸造数万亿枚未经授权的XRP代币,从而威胁到总市值高达940亿美元的整个市场体系。

基金会澄清:绕过常规流程系应对极端威胁

基金会在声明中解释道,之所以决定跳过协议变更的标准修订程序,是因为此次面临的威胁性质极为特殊。这一漏洞存在于XRP账本的核心支付引擎中,能够绕过固定的供应上限,理论上允许在单笔交易中生成约18.45万亿枚新XRP。

安全公司Veria Labs追溯发现,该漏洞最早可至2015年便已存在,其潜在危害巨大——相当于实际流通供应量的一百八十倍。然而,基金会强调,截至目前,并未有任何未经授权的代币被铸造或进入流通领域。所有XRP持仓均公开透明地记录在公共账本上,任何潜在的非法铸造行为都会立即暴露在社区视野之中。基金会明确指出,该漏洞从未在主网环境中被实际观测或利用。

持续监控与快速应急响应

Continuous monitoring of network supply is part of the daily operations of the ledger. Community members always ensure system integrity by verifying supply data. The foundation reiterated that if a new XRP is minted due to the vulnerability, this will immediately become apparent among network participants because all balances and supplies are publicly visible and regularly verified.

Researchers at Veria Labs discovered the threat and shared their findings, prompting the foundation, RippleX, core developers, and a broad community of trusted verifiers to quickly coordinate and work together to patch the vulnerability as quickly as possible.

Normally, protocol changes to XRP ledgers require approval by more than 80% of trusted verifiers for two consecutive weeks before they can be implemented. The foundation explained that following this regular timeline would expose the vulnerability for too long, giving opponents weeks to exploit. Given the speed at which modern technology, including artificial intelligence, detects and exploits vulnerabilities, it was finally decided to distribute patch software updates immediately.

On September 25, the verifier received the update package and released a public binary file. The foundation emphasizes that no single entity can force the installation of software updates across the network; each participant independently decides whether to install patches. Through this rapid and coordinated action, the aim is to completely close this security gap before any malicious actor takes action.

Crypto security background and insight into meme token trends

此次事件凸显了区块链项目在快速缓解安全风险方面所面临的挑战。随着市场状况和技术的发展,监控关键指标——包括网络供应量、验证者活动和技术趋势——变得日益重要。

例如,在瞬息万变的 meme 代币市场中,数百万美元的资金兴趣可能在几天内涌入或流出。相关数据显示,一笔“Niu Lai”交易将99美元转化为约37万美元,这强调了跟踪价格走势以及投资者时机选择和代币选择的重要性。通过整合代币发现与交易功能于一身的平台,投资者排名、交易警报和社会化动态等功能,使参与者能够实时追踪 meme 代币趋势及投资者行为。

Disclaimer:

All content published on this website, including hyperlinks, related applications, forums, blogs, and other media accounts, originates from third-party platforms and their users. CoinMarketInsight makes no representations or warranties of any kind regarding the website or its content. All blockchain-related data and materials are provided for informational and research purposes only and do not constitute financial, legal, or investment advice. Users and third parties are solely responsible for the content they publish. CoinMarketInsight shall not be liable for any losses arising from the use of this website. You should exercise caution and conduct your own independent research, review, analysis, and verification before making any decisions.

Read Full Article
More News
TOP

TOP