ZachXBT criticized XRPL for paying only a 250000 USD bounty, saying that its vulnerability could cause XRP unlimited issuance.
Article
ZachXBT accused XRPL only paying white-hat hackers who discovered the “infinite XRP supply vulnerability”250000 USD bounty
BlockBeats reports that October 12, in response to the “XRP Ledger Foundation’s security fix” incident, the on-chain investigator ZachXBT stated, “Despite its treasury holding tens of billions of USD, it only paid white-hat hackers 250000 USD as a reward for discovering a critical vulnerability that could cause XRP to be minted without limit. This clearly encourages attackers to directly exploit the vulnerability to steal hundreds of millions of USD next time, rather than proactively reporting it in good faith. This is why people do not take XRPL or Ripple seriously as an organization.”
Previous reports stated that XRP Ledger fixed a payment engine vulnerability that had existed for more than a decade, preventing XRP from being issued in excess.
Original link https://m.theblockbeats.info/flash/371343
Key points
01
ZachXBT stated that XRPL only paid white-hat hackers who discovered a vulnerability that could cause XRP unlimited issuance a 250000 USD bounty.
02
ZachXBT believes that this bounty arrangement could encourage attackers to exploit vulnerabilities rather than proactively report them.
03
Previous reports indicated that XRP Ledger had fixed a payment engine vulnerability that had existed for more than a decade to prevent XRP excess issuance.
04
The relevant information was October 12 reported by BlockBeats.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
A white-hat hacker discovered a payment engine vulnerability that could allow XRP to be issued in excess. ZachXBT believes that 250000 USD’s bounty did not match the vulnerability’s potential risk, and therefore criticized XRPL and Ripple’s security governance.
Why it matters to readers
The incident involves vulnerability remediation, vulnerability disclosure incentives, and XRP supply security, but the material does not indicate whether the vulnerability was ever actually exploited.
It shows that crypto projects must not only fix vulnerabilities but also establish bounty mechanisms that encourage researchers to proactively report issues.
Risks and unknowns
The material does not provide specific technical details of the vulnerability.
The material does not confirm that the vulnerability was ever actually exploited or caused XRP issuance.
The material does not provide independent verification of the remediation results by security professionals.
250000 USD The specific recipients and conditions of the bounty payment are not stated in the material.
Related Developments
Loading event timeline…
Related concepts
white-hat hacker
This term is not in the glossary yet. Browse related concepts in the glossary.
