XRPL Foundation patches ‘critical’ flaw that almost made it to mainnet
The AI bug hunter scanned the Ripple blockchain codebase to catch the vulnerability before it was deployed, enabling engineers to patch it.
XRP Ledger Foundation has confirmed it patched a critical vulnerability found in a yet-to-be-enabled amendment of Ripple’s XRP Ledger, averting a potentially major exploit.
On Feb.19, a security engineer at cybersecurity firm Cantina, Pranamya Keshkamat, and the Cantina AI security bot identified a “critical logic flaw” in the signature-validation logic of Ripple’s blockchain, XRP Ledger, reported the XRP Ledger Foundation on Thursday.
The vulnerability in the signature validation code batch amendment would have allowed an attacker to execute transactions from victim accounts, including draining funds, without ever having the victim’s private keys.
