[XRP Ledger Fixes Major Vulnerability Present for Nearly 11 Years, Attackers Could Have Created XRP Out of Thin Air] BlockBeats News, October 10: XRP Ledger recently patched a payment system vulnerability that may date back to 2015. This vulnerability could have allowed attackers to bypass the system's token exchange amount calculation limits through a specially crafted payment transaction, enabling them to generate and spend large amounts of XRP out of thin air, thereby undermining the mechanism that caps the total XRP supply at 100 billion. According to disclosures, attackers could create hundreds of accounts, have these accounts post offers to exchange small amounts of tokens for large amounts of XRP, and then execute all these offers simultaneously through a single payment. Due to a flaw in the software's calculation of total transaction amounts, the seller accounts could receive the full XRP amount, while the buyer accounts would pay almost nothing in return. Researchers Cayden Liao and Veria AI reported this vulnerability on September 22, after which RippleX reproduced the attack and confirmed that the generated XRP could be used in subsequent transactions. RippleX stated that there is currently no evidence suggesting the vulnerability was exploited on any public network. The development team released version 3.4.1 of `xrpld` on September 25 to fix the issue. [Original Link]