JosipIV

Olives

[MartyParty @martypartymusic]

Official XRPL vulnerability disclosure report published October 9, 2026.

What happened

A researcher (Cayden Liao and Veria AI) reported an integer-overflow bug in the payment engine through the XRPL Bug Bounty program on September 22, 2026. It affected xrpld 3.4.0 and earlier and dated back to when the current payment engine was written in 2015.

How it worked: When a payment consumed many offers from the order book, the engine summed the amounts the buyer owed using plain 64-bit integer addition with no overflow check. A few hundred specially crafted offers (each selling a tiny amount of a token for a very large amount of XRP) could make the total wrap around to a small number. The engine still paid each offer owner the full amount but charged the buyer only the wrapped-around total effectively minting the difference as new, spendable XRP.

Two existing safeguards failed for the same reason:
• The built-in “no XRP created” invariant check used the same unchecked 64-bit summing and also wrapped around, so it saw only the normal transaction fee.
• Per-account balance limits only trigger if one account exceeds the total supply; spreading the minted XRP across many attacker-controlled accounts kept each under the limit.

The attack required unnatural offer prices that no real trader would use and a payment deliberately built to consume them all at once. It could not be triggered by ordinary trading or payments. Cost was low (account/offer reserves plus fees).

Fix and impact

The fix shipped in the emergency xrpld 3.4.1 release on September 25, 2026. The payment engine now checks for overflow when summing offer amounts; if it would overflow, that part of the payment fails cleanly (path dry / partial payment). The invariant checker was also upgraded to a wider counter, and related summing paths were hardened.
Because of the severity (cheap, no special access, and able to mint spendable XRP), this change was applied immediately on upgrade rather than going through the normal multi-week amendment process. Validators upgraded rapidly (>80% of the default UNL on release day). The source code was withheld briefly and has since been published.

No evidence of exploitation on any public network.

The same 3.4.1 release also fixed a separate Batch-transaction wrapper validation issue (fixBatchV1_2 amendment, which activated on mainnet today). Older servers are now amendment-blocked and must upgrade to stay in sync.

IMO: Nobody knows what effect this has had on the supply.

[Goku ⚡️🔋 @SaiyanOnSolana]

🕊🕯Today is one year since the passing of the great Akira Toriyama.

Thank you for inspiring a generation, for giving us hope, and showing us what's possible.

We will immortalise your work.

You guide us - $Goku guides us.

[JosipIV @iv_josip]

@thejefflutz That's why it's all as good as holding a meme (community) coin.

[JosipIV @iv_josip]

Verifying my Twitter account for my #GalxeID gid:AwtYiojXCXcNA8uyHFHwVS @Galxe

https://t.co/PDoyTi3Eqf

[JosipIV @iv_josip]

@FefeDemeny @cryptomanran Well Done Fefe. Loved the first giveaway show.

[JosipIV @iv_josip]

@cryptomanran @mbsonsol Hilarious Ran. So Degen.
3djsk1Tka736SCcAzx2AVQteD2NwmdrEMpmiJ3HeJE6S

[JosipIV @iv_josip]

@cryptomanran @Bitard_Solana Loving the Banter content for bringing forward big communities.
SOL-3djsk1Tka736SCcAzx2AVQteD2NwmdrEMpmiJ3HeJE6S

[JosipIV @iv_josip]

@cryptomanran @TrumpManiaSOL Let's GO RAN.
3djsk1Tka736SCcAzx2AVQteD2NwmdrEMpmiJ3HeJE6S

[JosipIV @iv_josip]

@cryptomanran @solclownworld Don't we all love clowns?!
3djsk1Tka736SCcAzx2AVQteD2NwmdrEMpmiJ3HeJE6S

[JosipIV @iv_josip]

Bio pic courtesy of @FreeMoonMeme.
Go to their twitter and find https://t.co/86PuxdvLiC.
Then select freemoon labs at the top of their page.

[CoinW @CoinWOfficial]

🚨 #CoinW Listing Alert!

$GUMMY @gummyonsolana will be Listed on 26th April 2024, 14:00 UTC.

🔥 RT and join the GUMMY bounty program and share a 5,000 USDT reward! 🔥

🔸 Deposit: 26th April 2024, 12:30 UTC
🔸 Trading: 26th April 2024, 14:00 UTC
🔸 Withdraw: TBA

📚 Say hello to $Gummy, a 420-strain gummy bear ready to take over the Solana ecosystem.

Learn more: https://t.co/bLVhPrAChd

[JosipIV @iv_josip]

@gummyonsoIanas @cryptomanran This is a scam. Be careful

[JosipIV @iv_josip]

@cryptomanran beware of the scam reply

[JosipIV @iv_josip]

Etheopia bans ICE imports! More bullish on #TSLA.
https://t.co/bcoRWAEScG

[JosipIV @iv_josip]

@shakepay Great to see this contest kick off again. Good luck all.
@josipjedi
#shakepaid

[JosipIV @iv_josip]

@benjamincowen Looks like this didn't help with #btc @ 23k in September.

[Trade Travel Chill @tradetravelchil]

#bitcoin bulls doing all they can to destroy the bears right before the options close out!

These are huge buy orders trying to keep price as far away from 26k as possible.

#optionstrade #cryptocurrency

[JosipIV @iv_josip]

Thank You for this Amazing Alpha Annii! 👏
Absolute Gold.

[Trade Travel Chill @tradetravelchil]

By request, on todays @crypto_banter show I'm going to be running through my entire pre-market open charting process for any cryptocurrency & breaking it down step by step for all the newbies out there that want to understand my charting process more.

This show is not to be missed!

See you there ✈️✈️
https://t.co/GkGhjLa5Ez
#cryptotrading #Cryptocurrency

[Trade Travel Chill @tradetravelchil]

By request, on todays @crypto_banter show I'm going to be running through my entire pre-market open charting process for any cryptocurrency & breaking it down step by step for all the newbies out there that want to understand my charting process more.

This show is not to be missed!

See you there ✈️✈️
https://t.co/GkGhjLa5Ez
#cryptotrading #Cryptocurrency

[JosipIV @iv_josip]

@OlivelandNft Thank You for the update Oz. So glad to see the amazing growth of this NFT project bringing positive change to our world.

[Oliveland @OlivelandNft]

🌼🐝 The Sweetest Triumph! Oliveland's 2023 Honey Harvest is Complete! 🍯🌿

We're buzzing with joy and pride as we share some extraordinary news: Our 2023 honey harvest has officially concluded, and it's a testament to the remarkable harmony between nature, our dedicated farmers, and our cherished community. 🌼🐝

In the heart of our eco-paradise, 14 beehives hummed with life as nearly 1 million Apis Mellifera Cypria bees worked tirelessly, collecting the nectar of our flourishing Lavenders, the golden glow of sunflowers, the delicate charm of Faselia (Phacelia tanacetifolia), the tangy allure of wild mustard, and the fragrant embrace of wild thyme enveloping our farm. 🌻🌼🌿

Their labor of love yielded a spectacular 120 kg of liquid gold. From this golden bounty, we've delicately extracted 20 kg of pure organic honey, complete with the natural comb – a true testament to the purity of our ecosystem. An additional 70 kg of silky-smooth strained honey was gently collected, brimming with the essence of Oliveland's diverse flora. 🍯✨

But that's not all. We've ensured our beloved bee family is well cared for, leaving behind 30 kg of honey to sustain them through the winter months. As they rest and rejuvenate, we eagerly anticipate their return in the spring, ready to nurture new generations and grow our bee family to 20 hives! 🌸🐝

Our Oliveland honey, a culmination of nature's grace and our community's dedication, will soon grace our online shop shelves. Every drop embodies the sweetness of collective effort, echoing the harmony between our bees and our farmers. 🏡🍯

This success is a tribute to the unwavering commitment of our Oliveland community, where each member plays a vital role in nurturing our ecosystem and reaping the rewards it bestows upon us. 🌎💚

With heartfelt gratitude and the promise of many more sweet victories to come.
Join us to share this excitement by buying a pack of tree.

https://t.co/69o0glMHD7

https://t.co/0bogl1YZER

@WAX_io
@AtomicHub
#Oliveland #LavenderHarvest #LavenderOil #LavenderHoney #LavandulaAngustifolia #SustainableFarming #Tranquility #NatureEssence #Beekeeping #OlivelandHarvest #LavenderOil #SustainableLiving #OlivelandHoneyHarvest #PureHoney
@WAX_io
@AtomicHub