XRP Ledger developers have defended an emergency security patch that fixed a bug capable of creating XRP beyond the network's fixed supply, saying the usual two-week validator vote would have left the network exposed to attackers.
The XRP Ledger Foundation has pushed back against claims that its emergency security patch was forced on network operators, defending the decision to bypass the network's normal amendment process for the first time in more than ten years.
The fix, released on Sept. 25, came three days after a bug bounty report and took effect immediately on any server that installed it. Developers said waiting for a normal amendment vote would have made the fix public for weeks before it took effect, leaving the flaw open to exploitation.
"With a normal amendment vote, the fix would have been public for weeks before it took effect, risking network security," XRPL developers said.
The release was the first deliberate bypass of the standard amendment process since it was introduced more than ten years ago. The bug was capable of creating XRP beyond the network's fixed supply.
Analysis
Why This Matters
- The bug threatened the network's core promise of a fixed XRP supply, with potential consequences for holders and the token's value.
- Skipping the normal amendment process raises questions about how the XRP Ledger balances urgent security fixes against decentralised decision-making.
- The incident could influence how similar vulnerabilities are handled on other validator-governed blockchain networks.
Background
The XRP Ledger is a blockchain network that typically changes its rules through an amendment process in which validators vote on proposed updates over a two-week period. This patch bypassed that process, marking the first such bypass since the system was introduced more than ten years ago. The emergency fix was based on a bug bounty report received three days before release.
Key Perspectives
XRP Ledger Foundation and developers: The emergency patch was necessary. Waiting for a normal validator vote would have revealed the flaw to attackers before the fix could take effect, and the patch was available for any server operator to install.
Network operators and critics: Claims have emerged that the patch was effectively forced on network operators, bypassing the usual governance process and leaving operators little choice in how the update was handled.
Skeptics: Bypassing the amendment process, even for a serious bug, sets a precedent that could weaken the network's decentralised governance if used again in less urgent circumstances.
What to Watch
- Whether any XRP was actually minted beyond the fixed supply before operators installed the patch.
- Whether the foundation releases further details from the bug bounty report about the vulnerability itself.
- How validators and the wider community respond to the governance precedent, and whether the amendment process is reviewed or reformed.