XRP Ledger Bug Dating to 2015 Could Have Counterfeited XRP

A bug has been sitting in the XRP Ledger's payment engine since 2015, and it could have let an attacker counterfeit XRP. That's according to a Decrypt report published October 12. The flaw is an integer overflow. In theory, it would have allowed someone to mint spendable XRP beyond the token's total supply.

What we know

The problem lived in the payment engine, the part of the ledger that governs how value moves between accounts. It dates to 2015. It stayed dormant. That's the full confirmed picture for now.

Some background on the mechanics. An integer overflow happens when a calculation produces a number bigger than the space set aside to store it. The value wraps around or breaks, and the software can land on a wrong result. In a payment system, bad math can mean money that shouldn't exist.

What we don't know

Quite a bit. The source material doesn't say whether anyone exploited the bug. It doesn't say how the flaw was found, who found it, or how and when it was fixed. Until those answers arrive, treat any claim of real losses or active attacks as unconfirmed. We'll update if more detail emerges.

Why it matters

Part of XRP's pitch is a hard cap on supply. A bug that can break that cap goes straight at the core of the asset's value, so a flaw like this matters even if nobody ever used it. Holders should watch for two things: an official postmortem from the people who maintain the ledger, and confirmation that the problem is closed. Eleven years is a long time for a flaw to hide in core code. So who's checking the old corners of other chains?