Ripplex

A long-undetected XRP Ledger flaw could have theoretically allowed attackers to create billions of XRP, threatening the network’s fixed supply model. The XRP Ledger Foundation said the bug remained hidden because normal user activity never came close to triggering the conditions required for exploitation.

XRP Ledger developers have fixed a long-running vulnerability that could have allowed attackers to create and spend XRP without properly funding a payment. RippleX said it found no evidence of exploitation on public networks after reproducing the issue and shipping a fix in xrpld 3.4.1.

The XRP Ledger’s Batch upgrade has been delayed by at least 10 days after validator support briefly fell below the network’s activation threshold. The feature would allow users to bundle up to eight transactions, while a separate permission delegation upgrade has also been pushed back.

Ripple says asset managers and other commercial projects are preparing to use Batch V1.1, an XRP Ledger upgrade designed to group linked transactions so they settle together or fail together. The feature is nearing activation after a redesign and expanded security review following a critical flaw found in the earlier version.

XRP Ledger is close to triggering the activation process for Batch V1.1, an upgrade designed to bundle related transactions into a single operation. The proposal has support from 27 of 35 trusted validators, leaving it one vote short of the required threshold.