Long-Standing Code Flaw in XRP Ledger Threatened Token Supply Cap

A payment engine bug dating back to 2015 allowed integer overflow during multi-offer trades on the XRP Ledger’s built-in DEX. Sellers would receive full payment while only a tiny amount was deducted from buyers, effectively minting fresh XRP.

The safety check meant to prevent new token creation relied on the same faulty math, so it failed to catch the issue. The fix shipped in release 3.4.1 as a direct code change, with source published only after nodes updated.

No signs of exploitation were found on public networks. A separate, lower-severity batch-transaction flaw was also patched via amendment fixBatchV1_2, activated on 9 October.

The flaw was rated critical because a single transaction could have created more XRP than the fixed 100-billion supply cap, undermining the asset’s core scarcity guarantee.

Based on information from cryptonews.net