XRPL Foundation patches ‘critical' flaw that almost made it to mainnet

The AI bug hunter scanned the Ripple blockchain codebase to catch the vulnerability before it was deployed, enabling engineers to patch it.

XRP Ledger Foundation has confirmed it has patched a critical vulnerability found in an yet-to-be-enabled amendment of Ripple’s XRP Ledger, averting a potentially major exploit. 

On February 19, a security engineer at cybersecurity firm Cantina, Pranamya Keshkamat, and the Cantina AI security bot identified a “critical logic flaw” in the signature-validation logic of Ripple’s blockchain, XRP Ledger, reported the XRP Ledger Foundation on Thursday. 

The vulnerability in the signature validation code batch amendment would have allowed an attacker to execute transactions from victim accounts, including draining funds, without ever having the victim’s private keys. 

Read more