An unchecked integer overflow in the XRP Ledger’s payment engine could have created spendable XRP beyond the intended 100 billion supply limit. The flaw was in the arithmetic used when a payment crossed many order-book offers—not in XRP escrow—and the XRP Ledger Foundation’s 2026 disclosure says there is no evidence it was exploited on a public network. The fix shipped in xrpld 3.4.1 on September 25, 2026.
Could the bug really have broken XRP’s 100 billion supply limit?
Yes, in principle. The vulnerability created a path by which a payment could credit offer owners with more XRP than the buyer was charged. That difference could have become newly created, spendable XRP. The disclosure describes a potential software accounting failure; it does not report that XRP was actually minted on Mainnet or that the published supply arrangement changed.
As an Amazon Associate I earn from qualifying purchases.
The phrase “100 billion supply cap” refers to XRP’s intended total supply. Ripple’s 2017 explanation of escrow described 55 billion XRP—55% of the total possible supply—as placed into escrow to make scheduled releases more predictable. Escrow was background to supply predictability, not a mechanism that detected or fixed this payment-engine bug. Ripple’s explanation of XRP escrow
How the payment-engine overflow could create XRP
A payment can cross an order book and consume multiple offers. Each offer’s amount could be valid on its own, but the payment engine added XRP amounts across offers using unchecked 64-bit integer arithmetic. If the combined mathematical total exceeded what that fixed-width number could represent, it wrapped around to a much smaller value.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
The engine could then pay the offer owners the full amounts while charging the buyer only the wrapped total. The shortfall was not merely a discount: it was XRP credited without an equivalent amount being collected.
What an attacker would have needed to do
- Create hundreds of accounts and place offers selling tiny amounts of another token for unusually large amounts of XRP.
- Arrange for a single payment to consume enough of those offers that their XRP amounts overflowed when added together.
- Collect the credited XRP across the accounts. The disclosure says the accounts could all belong to the attacker.
The offers’ prices would be so poor that they sat below real liquidity. Ordinary payments would not reach them, and the disclosure says the exploit could not happen accidentally through normal trading.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Why the flaw stayed hidden for years
The XRP Ledger Foundation’s 2026 disclosure says investigation suggests the flaw had existed since the current payment engine was written in 2015. Routine payments and trades did not add amounts remotely close to the 64-bit limit, so the vulnerable path needed an intentionally constructed bundle of offers to be reached.
Recommended Free Tools
Two checks also failed to expose the issue, but for different reasons:
Rank #3
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
- The “no XRP created” invariant failed in tandem. It used the same kind of 64-bit sum, so it wrapped in the same way as the payment engine. The apparent net change looked like an ordinary transaction fee rather than newly created XRP.
- The per-account balance check could be avoided by splitting balances. It would fail if one account held more XRP than the total supply. Distributing the newly created XRP across hundreds of accounts kept each individual balance below that threshold.
In 2017, the XRP Ledger Community Blog described EnforceInvariants as automatic checks that examine transaction changes before results are committed, with the aim of catching violations of system properties and helping identify logic flaws. This incident illustrates a specific limitation: a safeguard that repeats the same faulty arithmetic may share the original bug rather than detect it. The 2017 explanation of invariant checking
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How the bug was found and fixed
The flaw was reported through the XRPL Bug Bounty program on September 22, 2026. RippleX engineers reproduced the mint on a local standalone server and in unit tests, then confirmed that the minted XRP could be spent in a follow-up payment. The disclosure says the report’s initial “Major” rating was raised to critical. It acknowledges Cayden Liao and Veria AI for the original report and proof of concept.
Rank #4
- EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
- 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
- TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
- WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
- SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.
The fix arrived in xrpld 3.4.1, released September 25, 2026. The payment engine now checks additions when summing amounts across offers and combining payment paths; a path that would overflow fails cleanly instead of producing the imbalance. The “no XRP created” check now uses a wider counter that cannot wrap in the same way. The release also included precautionary hardening of other balance-summing code.
Rather than wait for the usual amendment activation process, the team chose to have the fix take effect as individual servers upgraded. The disclosure reports that more than 80 percent of default UNL validators were running version 3.4.1 or later on release day, before the fix’s source code was published. That percentage is the report’s account of validator upgrades, not an independently verified census.
Best Value
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
Was the vulnerability exploited?
The Foundation’s disclosure says it found no evidence of exploitation on a public network. That supports saying the flaw was a serious potential threat, not that the XRP supply was actually inflated. It does not establish that no attempt was ever made anywhere; the public-network evidence reported is the relevant qualification.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
