پرش به محتوای اصلی
727 Finance
فارسی

A critical vulnerability over 10 years old was discovered in the XRP Ledger, which could have led to excessive issuance of XRP; it has been fixed and the upgrade completed.

PANews October 11 news: In response to the critical vulnerability in the payment engine reported by Veria AI, J. Ayo Akinyele, RippleX engineering lead, said that the XRP Ledger (XRPL) payment engine has had a severe vulnerability for more than 10 years, which could cause XRP to be minted beyond its fixed supply. The vulnerability was discovered through a bug bounty program and has not yet been exploited. The development team has released the xrpld 3.4.1 fix version and coordinated validators to complete the network upgrade before public disclosure. Akinyele said that AI is accelerating the speed of vulnerability discovery, and XRPL will increase proactive security investment, clean up technical debt, advance formal verification, and systematically eliminate potential risks in old code.

PANews October 11 news: In response to the critical vulnerability in the payment engine reported by Veria AI, J. Ayo Akinyele, RippleX engineering lead, said that the XRP Ledger (XRPL) payment engine has had a severe vulnerability for more than 10 years, which could cause XRP to be minted beyond its fixed supply. The vulnerability was discovered through a bug bounty program and has not yet been exploited. The development team has released the xrpld 3.4.1 fix version and coordinated validators to complete the network upgrade before public disclosure. Akinyele said that AI is accelerating the speed of vulnerability discovery, and XRPL will increase proactive security investment, clean up technical debt, advance formal verification, and systematically eliminate potential risks in old code.

اخبار مرتبط

  1. وزارت دادگستری ماداگاسکار: ۱۴۸ تبعه چینی که در پرونده‌های کلاهبرداری با ارزهای دیجیتال دخیل بودند، مسترد شده‌اند.

  2. قرارداد بازار پروتکل Talis مورد حمله قرار گرفت، تقریباً ۵,۷۰۰ توکن غیرقابل تعویض (NFT) سپرده‌شده به سرقت رفت.

    PANews ۲ نوامبر خبر داد: پروتکل Talis افشا کرد که در ۳۱ اکتبر، مهاجمی از یک آسیب‌پذیری در قراردادهای بازار و حراج خود در زنجیره Injective سوءاستفاده کرد و حدود...

  3. EIP-7702 چیست؟ ارتقای اتریوم پشت حادثه هک بایننس

    EIP-7702 به کیف‌پول‌های معمولی اتریوم اجازه می‌دهد کد قرارداد هوشمند را اجرا کنند، و از این طریق تراکنش‌های دسته‌ای و تراکنش‌های حمایت‌شده (پرداخت هزینه گس به ن...

  4. تحلیل: هکر بایننس در عرض دو روز حدود ۲۴۲ میلیون دلار را از طریق ترون پولشویی کرد.

  5. هی یی شایعه «رابطه مهندس بایننس با جاسوس کره شمالی منجر به سرقت شد» را تکذیب کرد