XRP Ledger Foundation confirms critical vulnerability in an amendment that has not yet been enabled

Techub News reported, according to Cointelegraph, the XRP Ledger Foundation has confirmed fixing a critical vulnerability found in an amendment that had not yet been enabled on Ripple's XRP Ledger, thereby averting a potential major attack.

The XRP Ledger Foundation stated that on February 19, security engineer Pranamya Keshkamat from cybersecurity firm Cantina and the Cantina AI security bot discovered a "critical logic flaw" in the signature verification logic of the Ripple blockchain XRP Ledger. The vulnerability in the signature verification code batch modification would allow attackers to execute transactions from a victim's account, including stealing funds, without obtaining the victim's private key. XRPLF said: "The amendment was in the voting phase and had not been activated on the mainnet; no funds were at risk." Besides potentially leading to fund theft and ledger state tampering, such a vulnerability could also "disrupt the stability of the ecosystem." Currently, XRPLF has advised validators to vote against the amendment and released an emergency version (rippled 3.1.1) on February 23 to prevent the amendment from taking effect.