The XRP Ledger Foundation said an emergency xrpld 3.4.1 patch fixed a bug that could have allowed an attacker to create spendable XRP. It said no new XRP was created through the bug; the original supply was 100 billion XRP, while fee burning has reduced the current supply to almost 99.986 billion.
Ripple engineering head J. Ayo Akinyele said researchers reported the vulnerability through a bug bounty program before it was exploited. He said an attacker could have used hundreds of specially crafted offers on the ledger’s exchange and consumed them in a single payment.
