← Editorial XRP

AI Tool Uncovers Critical XRP Ledger Vulnerability That Created False Token Supply

Security researchers utilizing artificial intelligence identified and helped patch a major flaw in the XRP Ledger that could have generated trillions of unauthorized tokens.

· -3

Cybersecurity firm Veria Labs revealed that researcher Cayden Liao and an artificial intelligence tool, Veria AI, discovered a severe vulnerability in the XRP Ledger on September 22, 2026. The flaw could theoretically have generated up to 18.45 trillion XRP tokens out of thin air—more than 184 times the network's fixed 100 billion token supply—posing a major threat to the network's market valuation of around $94 billion at the time.

The issue originated from a counting error occurring when a single payment fulfilled multiple trading offers simultaneously. This bug allowed sellers to receive complete payments while charging the buyer virtually nothing, inadvertently creating non-existent tokens, while an automated safety check failed to catch the discrepancy due to the same faulty code.

Ripple’s engineering unit, RippleX, confirmed that there was no evidence the vulnerability had been exploited. Following the responsible disclosure through a bug bounty program, engineers reproduced the problem on the same day and issued a patch within three days. More than 80% of trusted validators deployed the updated software on the day it was released.

How this piece reads Sell tone -3
Site call on XRP Neutral score -17.7

These two are not the same thing, and one does not produce the other. The left is how this single article reads, from its tone alone. The right is the site’s own call on the asset, from indicators and analysis. Press tone feeds no score and no signal: on the only corpus this site has measured, daily tone tracked the move that had already happened and showed no measurable link with what followed.

More on XRP All pieces →

Rewritten from the headline, the teaser and the one-line summary the qualification step produced — that is all the material there is, and nothing is added to it. The source link is kept on file so any item can be checked, and is not published here.