PANews October 10 news, according to XRP Ledger's official disclosure, xrpld version 3.4.1 has fixed an integer overflow vulnerability in the payment engine. An attacker could mint XRP out of thin air and spend it normally through hundreds of specially crafted offers and one payment, and could bypass the "no XRP minting" security check, with the minted amount potentially far exceeding the total supply. The vulnerability may have existed since 2015. Researchers submitted it through the bug bounty program on September 22, and version 3.4.1 was released on September 25. No signs of exploitation have been found so far.
XRP Ledger fixes a vulnerability that lay dormant for about a decade, allowing attackers to mint XRP out of thin air.
Related news
Talis Protocol market contract attacked, approximately 5,700 escrowed NFTs stolen.
PANews November 2 news: Talis Protocol posted a disclosure that on October 31, an attacker exploited a vulnerability in its marketplace and auction contracts on...
What Is EIP-7702? The Ethereum Upgrade Behind the Binance Hack Incident
EIP-7702 allows regular Ethereum wallets to run smart contract code, thereby enabling batch transactions and sponsored transactions (paying Gas fees on behalf o...