security flaw

How potential $94B XRP hack was stopped: ‘This was a serious vulnerability’

0Importance
closedStatus
2News media
2Pieces
Published
Updated
Since then
1 new report
In
XRP

Security researchers used AI to find a flaw in XRP Ledger’s multisignature setup that could have let an attacker drain about $94 billion worth of XRP from thousands of wallets, and the issue was later fixed. Separately, a Ledger customer said they bought a tampered device from a major European retailer, and the company replaced the wallet after the report.

Key claims & sources

✓
Security researchers used AI to uncover a flaw in XRP Ledger’s multisignature wallet setup that could have let an attacker empty roughly $94 billion in XRP from thousands of wallets.
✓
Ripple fixed the issue after the researchers identified it, and the researchers said it was tied to token approvals in its multisignature wallet architecture.
✓
A customer in Europe said they bought a Ledger wallet that had been tampered with after delivery from a major retailer, and Ledger later replaced the device.
✓
The European retailer involved in that report said it had sold and shipped the wallet from its warehouse in a sealed box and asked for the item back so it could investigate.

What it means

This matters to XRP Ledger users and wallet holders because the flaw described in the report was framed as something that could have affected thousands of accounts at once. It also matters to security teams because AI was used to surface the problem before the issue was fixed.

For Ledger customers, the practical change is that a user said a wallet bought from a major European retailer arrived tampered with, and the device was then replaced by Ledger. What stays the same is that the report still describes a sealed-box retail sale followed by a complaint and an investigation request, not a broader confirmed pattern.

Market reaction i

XRPXRP it is the asset of the company or protocol in the event
first headline
+0.7% 2 h before
+1.4% 4 h after
$1.40price at publication
12data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 11 14:00
+8 h 57 m
Oct 11 22:57
Cointelegraph context
Its angle: researchers, retailer, trillion; with quotes

Has this happened before?

WhenWhat happenedFigure
27 days ago XRP Ledger discloses overflow bug that could have minted XRP beyond its supply cap event 1 actors in common · 8 news media
27 days ago XRP Ledger Might Be Vulnerable to AI, Avalanche Founder Warns event 1 actors in common · 4 news media
27 days ago XRP Ledger activates atomic batches and security fix event 1 actors in common · 5 news media