XRP Ledger Foundation Clarifies Security Fix Concerns: No Additional XRP Issued, Supply Remains Fixed

BlockBeats news, October 12: The XRP Ledger Foundation (XRPLF) posted on social media to clarify questions and misunderstandings arising from the recent xrpld 3.4.1 security fix. The foundation explicitly stated that the vulnerability fixed in this update did not lead to the minting of additional XRP. The total supply of XRP has been fixed at 100 billion since the ledger launched, and no transaction can create more tokens; the vulnerability was a path to bypass relevant rules and has been fixed in version 3.4.1 two weeks ago. The ledger data is fully public, and the current actual circulating supply is approximately 99.986 billion XRP (deflationary due to fee burning). Both the community and the foundation have continuously verified the supply situation and found no anomalies.

The vulnerability required hundreds of deliberately constructed operations to trigger, could not be reached by ordinary payments, and was discovered and responsibly reported by Cayden Liao and Veria AI through AI. To avoid exposing the attack surface during the amendment voting period after a public fix, XRPLF, RippleX, core developers, and validators, through social consensus, prioritized distributing the fixed version to default UNL validators and released public binaries on September 25; subsequently, through the normal amendment voting process (over 80% support for two consecutive weeks), 3.4.1 became a required version. The foundation stated it will further strengthen formal verification, AI adversarial testing, and bug bounty programs.