Independent DeFi security desk · Status: operationalMethodology & corrections · Submit an incident
DeFi Safety · Fact checked

Why a bug that could have threatened XRP's 100 billion supply cap stayed hidden for years

The XRP Ledger Foundation said normal parameters never triggered the bug that could have broken XRP's supply cap, which is why it was undetected for years.

This article may contain affiliate links. Commercial relationships are disclosed in the affiliate policy.

DeFi Safety — illustration keyed to this article's identifier. Source documents are listed under Sources and are not reproduced here.

What happened

The XRP Ledger Foundation said normal parameters never triggered the bug that could have broken XRP’s supply cap, which is why it was undetected for years.

Reported details

  • XRP Ledger fixes a decade-old bug that could mint 18 trillion XRP. Researchers earned a $250K bounty, with no evidence of public exploitation.

Why this matters

Why is a factual update rather than a structural change to tokenized assets. Its value to a desk is the sourced detail and the timing, so read it next to the linked reporting and treat any figure the sources do not state as unknown.

Evidence boundary

The scope is limited to what the linked reports state, and where two of them diverge both positions are recorded without either being picked in advance.

What to verify

Corroborate Why with one independent dated source, and treat any figure the linked reports do not state as unknown rather than inferred.

Sources and editorial check time

This information is educational and is not financial, legal, or tax advice.

Sources