BTC $82,927.00 ▲ 0.17% ETH $2,499.03 ▲ 0.17% BNB $746.72 ▼ 0.32% XRP $1.39 ▼ 1.12% SOL $109.30 ▼ 0.28% TRX $0.3306 ▼ 0.04% FIGR_HELOC $1.07 ZEC $1,236.54 ▲ 0.85% HYPE $85.03 ▲ 1.38% DOGE $0.0851 ▼ 0.87% XMR $530.85 ▲ 0.94% LINK $12.85 ▼ 0.44% WBT $81.54 ▲ 0.18% ADA $0.2454 ▼ 3.77%
61 Greed

XRP Ledger patches payment bug that could have breached 100 billion supply cap

XRP Ledger patches payment bug that could have breached 100 billion supply cap Image: BeInCrypto
Image via BeInCrypto.

The XRP Ledger disclosed an integer-overflow flaw in its payment engine on October 9, 2026. The bug could have let an attacker create spendable XRP beyond the network's 100 billion token cap. A fix shipped in server software version 3.4.1 on September 25, before the code was published. RippleX said it found no sign anyone used the flaw. XRPL said the issue was not a simple one-transaction exploit.

Key points

  1. An emergency update, server software version 3.4.1, was released on September 25, before the flaw was published.
  2. XRPL said it found no evidence the vulnerability had been exploited on any public network.
  3. Triggering it required hundreds of deliberately priced offers followed by a single payment, not one transaction.

Why it matters

A single flaw could have undermined the XRP Ledger's 100 billion token supply limit, which the network treats as fixed. The fix shipped before the code was made public, and no exploitation was found.

What's unclear

The reports do not say whether every validator had upgraded when the fix took effect, more than 80% of default validators upgraded on release day.

Price context · XRP

At publication
$1.39
Now
$1.39
Change since
+0.00%
7 days · dashed line = publication

Sources · 2 publishers

BeInCrypto Tier 2 First report
100 Billion XRP Supply Was Nearly Broken by a 10-Year Bug
Crypto Daily Tier 3
XRP Ledger Discloses and Patches Bug That Could Have Broken Its Supply Cap

Coverage timeline

  1. First reported by BeInCrypto
  2. Confirmed by Crypto Daily
  3. CryptoVideos brief published
How this brief was made. Our system found this event in 2 independent publications, summarised two complete reports with AI and checked every number above against the source text. Sources are linked in full. Not financial advice. Report an error

Related briefs