Ripple patched a decade-old XRP Ledger vulnerability that could have allowed excess XRP; Veria AI found it via Ripple's bug bounty, and RippleX will strengthen security testing and review legacy code. Ripple patched a critical XRP Ledger payment-engine vulnerability before public disclosure. The flaw, present for more than ten years, could have enabled minting of excess XRP beyond the fixed supply cap. Veria AI discovered the issue through Ripple's bug bounty program, enabling a timely fix prior to exploitation. RippleX will bolster security testing and audit long-standing code to mitigate similar risks.

RippleX engineering lead J. Ayo Akinyele said that the XRPL payment engine contained a serious vulnerability that had existed for more than a decade and could theoretically have led to the excessive creation of XRP. The vulnerability was discovered by Veria AI before it was exploited and proactively fixed by Ripple, and the network upgrade has been completed. AI is changing the speed of vulnerability discovery. XRPL will strengthen its bug bounty program, expand AI-assisted vulnerability mining and adversarial testing, review critical modules, and promote formal verification to systematically enhance security and reduce potential risks. The goal is to identify and eliminate potential risks in legacy code, making the network more difficult to attack.