XRP Ledger Bug Bounty Draws ZachXBT’s Criticism
Blockchain investigator ZachXBT criticized the XRP Ledger (XRPL) for paying Veria Labs just $250,000 to report a critical vulnerability. Veria said the flaw, which had existed since 2015, could have allowed a single transaction to create about 18.45 trillion XRP. ZachXBT argued the payout was too small relative to the potential damage and could discourage white-hat disclosures. The XRP Ledger Foundation said there was no evidence the bug had been exploited and that no XRP was created. The flaw was patched after more than 80% of validators upgraded, and XRPL said the fix was reached through community consensus. The foundation has pledged to strengthen its bug bounty programme but has not provided reward levels or a timeline. The incident raises questions about XRP Ledger security incentives, but no supply change or loss of funds has been confirmed.
Neutral
The news is neutral for XRP’s price because the vulnerability was patched, there is no evidence it was exploited, and no additional XRP or loss of funds was confirmed. In the short term, the low bounty and public criticism could prompt traders to monitor XRPL security and governance, potentially adding modest uncertainty or volatility. However, the reported threat is not an ongoing supply shock. Over the longer term, a stronger bug bounty programme could improve disclosure incentives and confidence in XRPL security, while unclear reward terms may leave concerns unresolved. Without an exploit, a supply change, or a material shift in network activity, the report alone offers no clear directional price signal.