AI Tool Helps Avert Critical XRP Ledger Security Flaw
The XRPL Foundation patched a critical vulnerability in an unactivated amendment, identified by a Cantina AI tool, preventing potential ecosystem destabilization.Summary
The XRP Ledger Foundation (XRPLF) confirmed patching a critical logic flaw in the signature-validation code of an amendment that was still in its voting phase and had not yet been activated on the mainnet, meaning no funds were at risk. The vulnerability, identified by Pranamya Keshkamat and the Cantina AI security bot, would have allowed an attacker to execute transactions, including draining funds, from victim accounts without needing their private keys. The XRPLF noted that a large-scale exploit could have destabilized the ecosystem and caused a significant loss of confidence. Cantina CEO Hari Mulackal stated the bug, found by their autonomous hunter Apex, could have put nearly $80 billion (XRP market cap) at risk. Validators were advised to vote against the amendment, and an emergency release (rippled 3.1.1) was published on February 23 to block its activation. This incident highlights the growing deployment of AI tools in cybersecurity to detect code bugs.
(Source：Cointelegraph)