Key Takeaways Cayden Liao and Veria AI initially reported the XRPL overflow bug through the bug bounty program on Sept. 22, 2026. RippleX rated the flaw critical, and over 80% of default UNL validators ran the xrpld 3.4.1 fix by Sept. 25. The XRPL disclosure on Oct. 9 found no exploit, as the fixBatchV1_2 amendment went live the same day. What Was Actually Broken? The problem sat inside the code that settles payments across the XRP Ledger’s built-in decentralized exchange (DEX). According to the official vulnerability disclosure report published yesterday, when a single payment consumed many offers, the engine added …


