Security· ★★★★· neutral·

XRP Ledger Deployed Emergency Fix for 11-Year-Old Bug Without Validator Vote

  • —The vulnerability dated back to 2015, with no evidence of exploitation on public networks
  • —Over 80% of operators on the default Unique Node List upgraded to xrpld 3.4.1 by September 25
  • —The emergency patch created a temporary window where upgraded and older servers applied different transaction rules
  • —A separate Batch security fix followed the normal amendment process and activated on October 9
Why it matters: The incident raises questions about how decentralized networks balance rapid emergency response against established governance procedures.
Source: Coinpaper