The $XRP Supply Bug Everyone Is Talking About, Explained A bug buried in the XRPL payment engine for about a decade could have created spendable $XRP from nothing and pushed the supply far beyond 100 billion if somebody had figured out how to use it. The issue goes back to code written around 2015. An attacker could have opened hundreds of accounts, placed specially priced DEX offers and then built one payment to consume them all. The payment engine would add up what the buyer owed using a 64bi

A decade-old XRPL payment engine integer-overflow flaw could theoretically have minted spendable XRP beyond the 100 billion cap. It was reported via the bug bounty, reproduced same-day, fixed in xrpld 3.4.1, and disclosed only after over 80% of default UNL validators upgraded. No exploitation was found on any public network, so supply integrity holds. The episode is a validator-upgrade and security-governance story rather than a fundamental supply event, though it may briefly weigh on sentiment.