The XRP Ledger Foundation defended the emergency security patch deployed on September 25 to fix a critical bug that could have allowed unlimited XRP creation beyond the network’s fixed supply. The vulnerability, an integer overflow in the payment engine present since 2015, could have been exploited by creating hundreds of specially priced offers to generate newly created, spendable XRP. The fix was released three days after the bug bounty report, marking the first bypass of the normal amendment process in more than ten years. The XRP Ledger Foundation rejected accusations of centralization, stating the decision to skip the usual process was made jointly with validators and required more than 80 percent validator support. Developers found no evidence that the bug was exploited on any public network.
Source: Read the original article
