XRPL developers rushed out a patch for a flaw that could have allowed XRP to be created beyond the ledger’s fixed supply. They say waiting through the usual validator process could have exposed the vulnerability to attackers; no exploitation is reported.

  • The fix took effect Sept. 25, three days after a bug bounty report.
  • A standard amendment vote would have kept the fix public for two weeks before activation.
  • The Foundation says protocol amendments still require over 80% validator support for two weeks.

The vulnerability is patched, but the emergency bypass spotlights a real trade-off: speed versus decentralization. XRP traders should track any further security disclosures—not mistake the patch itself for evidence of new XRP issuance.