XRPL 3.4.1 patches flaw that could mint unauthorized XRP; no exploitation reported
The XRP Ledger released version xrpld 3.4.1 to fix a payment-engine integer overflow vulnerability that could have allowed specially crafted payments or offers to create spendable XRP without authorization. The flaw may have existed since 2015 [1] [2].
Researchers reported the bug through the bug bounty program on September 22, and the patch was released on September 25, according to Phemex. XRPL and RippleX reported no evidence that the vulnerability had been exploited; developers bypassed the usual amendment timeline to address it, Coindoo reported [2] [3] [4].
Anonymous feedback used to improve internal story ranking. No public totals are shown.
Share
Share this article
Share this article on social platforms.
Support ClusterWire
If you find ClusterWire useful, tips help cover hosting and infrastructure costs.
We record anonymous interactions with tip buttons to understand feature usage. We do not include IP addresses, user-agent strings, or wallet addresses in these tip analytics. Blockchain transactions are public and may reveal the sending address.
Sources
Review the sources used to produce this brief. Citations open the referenced material in a new tab.
- 1
- 3XRP Ledger Found a Bug That Could Create XRPCoindoo• Oct 10, 2026
- 4RippleX Confirms No Evidence of Exploitation After Emergency XRPL 3.4.1 PatchCoinGape• Oct 10, 2026
Updates and corrections
No changes recorded in the new revision log. Earlier edits may not be included.
Topics
Related Topics
Topics identified from the sources associated with this article.