The tweet was deleted by the author.
But we saved everything 🙂.
Ripple responds to XRPL library breach with security patch
A critical security vulnerability was discovered and swiftly patched in the XRP Ledger ecosystem this week, after malicious code was found embedded in the widely used xrpl.js JavaScript library.
The flaw, if left unchecked, could have compromised thousands of XRP wallets and posed a catastrophic threat to the broader crypto infrastructure.
Key Takeaways
-Targeted Library: The compromised package was xrpl.js, Ripple’s core library for XRP-based applications.
- Limited Exposure: Only developers who updated during a 1-hour window were affected.
- Immediate Response: The XRP Ledger Foundation released clean versions of the library within hours.
Attack timeline and containment
The vulnerability was discovered by cybersecurity researchers at Aikido Security on Monday. The issue involved a backdoor inserted into xrpl.js—Ripple’s official library for interacting with the XRP Ledger—published on the Node Package Manager (NPM) platform. The malicious update was live for just over an hour but was capable of siphoning private wallet credentials to a hacker-controlled server.
The security breach occurred between 4:46 PM and 5:49 PM ET, during which several versions of the package were updated with hidden malware. Aikido’s Charlie Eriksen confirmed the code could have exfiltrated wallet seeds and private keys, placing any project that integrated the infected version at risk.
Fortunately, major projects such as Xaman Wallet and XRPScan were unaffected. The XRP Ledger Foundation responded quickly, issuing patched versions and advising immediate upgrades.
Implications for XRP and open source security
Given that xrpl.js logged over 140,000 downloads last week alone, the incident underscores the systemic risk posed by supply chain attacks in the open-source ecosystem. Ripple has confirmed that a full post-mortem is underway and will be published after a comprehensive review.
Security experts recommend all developers using the XRP Ledger’s JavaScript tools audit their applications and rotate any potentially exposed wallet credentials.
Ripple is currently seeing XRP rise on the back of the SEC's withdrawal of the appeal and the possible launch of an XRP ETF. The token's price rose to $2.27, showing a growth of 8% over the day.
XRP price dynamics (February 2025 - April 2025). Source: TradingView
In addition, we informed you earlier that XRP overtakes Solana in race for spot ETF approval.
This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.
Subscribe to TU news
Did you like the article?
Weekly Top Bonuses
Top News
Top 5 companies for you
United States
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
Live News
