Critical XRP Ledger Bug in Batch Amendment Could Have Drained User Wallets - U.Today

XRP-0,21%
DOGE1,03%
SHIB1,64%

A severe logic flaw within the XRP Ledger (XRPL) codebase was narrowly averted this month, a recent blog post states

Security researchers discovered a vulnerability that could have allowed attackers to drain user wallets without needing their private keys.

The bug, which was spotted in the proposed “Batch” amendment (XLS-56), was identified earlier this month by independent researcher Pranamya Keshkamat and an autonomous AI security tool named Apex

HOT Stories

Critical XRP Ledger Bug in Batch Amendment Could Have Drained User Wallets

Crypto Market Review: XRP Volatility Squeeze is a $2 Recipe, Will Dogecoin (DOGE) Zero Removal Happen in February? Shiba Inu (SHIB) Bullruns Aren’t Possible Yet

The amendment was still in its voting phase and had not been activated on the XRPL mainnet. Hence, no user funds were at risk or lost.

The vulnerability explained

The Batch amendment would allow multiple “inner” transactions to be grouped together.

These inner transactions are intentionally left unsigned in order to save processing power. Instead, authorization is delegated to the outer batch’s list of signers.

A critical loop error caused a major vulnerability in the process of calling signers.

If the system encountered a signer for an account that did not yet exist on the ledger, and the signing key matched that new account, the system immediately declared the validation a success. It then exited the loop early, avoiding validator checks

A specific sequence of batched transactions could have been used by the attacker to exploit the aforementioned vulnerability

Had the Batch amendment been activated on the mainnet before this discovery, the XRPL ecosystem would have potentially suffered a severe blow. An attacker could have stolen funds, modified the ledge state, and destabilized the ecosystem

Earlier this week, developers released the Rippled 3.1.1 reference server software. This emergency patch explicitly marks the Batch amendment as unsupported,

A comprehensive fix that removes the early-exit loop and adds tighter authorization guards has been developed. It is currently undergoing rigorous peer review

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

XRP Consolidates Near $1.35 After Oil Shock Eases Inflation Fears

Key Insights Oil prices erased a 30% surge after reports of a possible 400 million barrel G7 reserve release eased inflation concerns. XRP trades between $1.34 and $1.40 as buyers defend key support while broader macro fears cool across financial markets. Technical indicators show fading s

CryptoFrontNews28m ago

Ripple Deepens XRP Role as Core Engine of Global Payments and Liquidity Infrastructure

Ripple is pushing aggressively into global markets while embedding XRP deeper into its financial infrastructure, as CEO Brad Garlinghouse signals expanding payments, liquidity, and treasury ambitions tied to digital asset adoption. Is Ripple Quietly Building the XRP Engine That Could Reshape

Coinpedia55m ago

Solana and XRP Dominate DeFi Social Engagement As Network Activity Surges

Community engagement and social sentiment continue to play a role in shaping the future of Decentralized Finance, resulting in a continued increase in both market liquidity and developer interest. Market analytics from recently published data indicate that a large percentage of overall social

BlockChainReporter1h ago

Goldman Sachs becomes one of the largest institutional holders of XRP spot ETFs, ranking among the top in holdings by the end of 2025.

By the end of 2025, Goldman Sachs will become one of the largest holders of XRP spot ETFs, with a large number of anonymous investors remaining in the market. Analysis suggests that core supporters dominate the capital inflows, with the top 30 holders collectively owning approximately $211 million, and the overall ETF product attracting over $1 billion.

GateNews3h ago
Comment
0/400
No comments