XRP Ledger payment overflow.

XRP Ledger payment overflow

Yes. The reported bug could let one crafted payment create 18 trillion spendable XRP, about 184 times the ledger’s intended 100 billion supply. The XRPL fix was released as xrpld 3.4.1, according to the supplied report.

The vulnerability

The payment engine aggregated amounts across order-book offers and payment paths using arithmetic that could overflow. That could bypass normal payment accounting and wrap the no-XRP-created invariant’s counter, allowing newly created XRP to be spent like ordinary XRP. The release added overflow checks to those aggregation steps and widened the invariant counter, as described in the report.

The supplied materials attribute discovery to a Veria Labs AI agent and say the fix shipped without the usual validator amendment vote. They do not establish that the exploit was used on the public ledger. The official XRPL disclosure and primary release details are not independently confirmed by the sources available here.