Ripple adds AI red team to XRPL security, uncovering more than 10 bugs

  • Ripple is integrating AI-assisted reviews and red-team testing into XRPL development.
  • More than 10 bugs have been found, with only lower-severity findings publicly disclosed.
  • The XLS-68 Sponsor vulnerability was fixed in xrpld 3.4.0 before mainnet activation.

Ripple is moving the XRP Ledger (XRPL) toward continuous, AI-assisted vulnerability discovery, combining code reviews, adversarial testing and a dedicated red team (security team that simulates attackers). The company says its red team has found more than 10 bugs, although only lower-severity findings have been disclosed publicly so far. AI tools are being integrated into pull-request reviews, attack-surface mapping, threat modeling and edge-case simulations, including tests of how older XRPL logic interacts with new functionality. The approach comes as XRPL develops features related to lending, tokenization, permissions and institutional finance, including native institutional lending and proposals that could allow XRP to be used as collateral for institutional credit. A vulnerability in the proposed XLS-68 Sponsor amendment was found during Devnet testing before mainnet activation and was fixed in xrpld 3.4.0, which also addressed earlier MPT and permissioned-DEX audit findings and added broader protocol hardening. Ripple says major amendments will increasingly undergo multiple independent audits, expanded bug-bounty testing and more attackathons before activation. Validator support remains necessary for protocol changes to go live, while the managed bug bounty program covers xrpld, Clio and major XRPL development libraries.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.