ZachXBT Criticizes Ripple’s $250K Reward for Critical XRP Bug
- A critical bug in XRP’s codebase could have minted up to 18 trillion new tokens.
- The flaw was discovered and reported on September 22, with a fix released by September 25.
- Caydel Liao received a $250K reward for identifying the bug, the maximum from Ripple’s program.
- ZachXBT criticized the reward as insufficient given the potential impact of the bug.
- The XRP Ledger Foundation is reconsidering its bounty sizes following public debate.
The discovery of an AI-found flaw that threatened XRP’s supply cap has sparked discussions about appropriate compensation for critical vulnerabilities. ZachXBT highlighted that low rewards might incentivize malicious exploitation rather than responsible disclosure.
Despite Caydel Liao receiving what he described as a record payout for an AI-discovered vulnerability, concerns remain about whether such amounts are adequate given the risk involved in this case. Source
