星球日报|Oct 12, 2026 07:53
[ZachXBT Criticizes XRPL's Low Bug Bounty: Only $250,000 Reward, May Undermine White Hat Hackers' Willingness to Report Vulnerabilities]
Odaily Planet Daily News: On-chain detective ZachXBT retweeted the XRP Ledger Foundation's statement regarding a recent critical security vulnerability and criticized its bug bounty mechanism. ZachXBT stated that XRPL holds billions of dollars in assets but only offers a $250,000 reward to white hat hackers who discover critical vulnerabilities. He believes this level of reward may weaken the motivation of security researchers to proactively report vulnerabilities and could even push attackers to exploit the vulnerabilities for massive profits rather than responsibly disclosing the issues. Previously, the XRP Ledger Foundation confirmed that the vulnerability theoretically could bypass the total supply limit of XRP, but no additional XRP was found to have been created as a result. The vulnerability has been patched in version 3.4.1.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink