EN ▼
Favorites
My Favorites
View All
Market Cap Price 24h%

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

XRP账本基金会确认:关键安全漏洞未导致新增XRP

2026-10-12 18:15:11
Bookmark

XRP Ledger基金会确认:关键安全漏洞未导致未经授权的XRP生成

简要说明:XRP Ledger基金会已确认,一起关键安全漏洞并未导致未经授权的XRP被创建。根据基金会的声明,开发者已通过2025年9月25日发布的XRP Ledger 3.4.1版本更新解决了该缺陷。

此前,市场曾担忧攻击者可能利用此漏洞绕过XRP的固定供应量限制。但基金会官员强调,区块链记录显示没有任何未经授权代币生成的证据。XRP在推出时设定了1000亿枚的固定供应量,随着交易手续费的销毁,供应量会逐渐减少。目前,剩余XRP数量约为999.86亿枚,这反映了网络的通缩机制。

此外,基金会指出,公共区块链浏览器允许用户独立验证XRP余额和历史交易记录。其监控系统也证实,该漏洞并未损害网络供应量的完整性。

XRP Ledger基金会解释紧急安全修复及验证器批准流程

此次漏洞的触发需要数百个精心构造的操作,因此通过普通交易意外激活的可能性极低。安全研究人员Cayden Liao和Veria AI发现了这一缺陷,并通过负责任的披露程序进行了报告。他们的发现促使RippleX、开发者、验证器和基金会之间进行协调,以实施保护措施。

To avoid exposing the details of the vulnerability through the regular amendment process, developers choose to distribute emergency software patches. This approach reduces the risk of attackers exploiting public vulnerability information before network protection takes effect. Developers then share the secure build with the default Unique Node List (UNL) validator through published contact information. Public binaries will go online on September 25 and other operators can install the update.

It is worth noting that the foundation clarified that the validator independently determines the software version to run on its system. The amendment still needs to be supported by more than 80% validators and lasts for two weeks.

Foundation outlines stronger AI security testing measures

In addition to immediate fixes, the foundation also announced that it will strengthen security through formal verification and AI testing. These measures will help developers identify complex vulnerabilities before attackers exploit network software weaknesses.

In addition, RippleX and community researchers will collaborate to improve security assessments and expand the vulnerability bounty program. The foundation stated that this Incident Response Service not only maintained the integrity of XRP supply, but also respected decentralized verifier governance and established network amendment requirements.

Disclaimer:

All content published on this website, including hyperlinks, related applications, forums, blogs, and other media accounts, originates from third-party platforms and their users. CoinMarketInsight makes no representations or warranties of any kind regarding the website or its content. All blockchain-related data and materials are provided for informational and research purposes only and do not constitute financial, legal, or investment advice. Users and third parties are solely responsible for the content they publish. CoinMarketInsight shall not be liable for any losses arising from the use of this website. You should exercise caution and conduct your own independent research, review, analysis, and verification before making any decisions.

Read Full Article
More News
TOP

TOP