XRP news today is dominated by a security revelation that caught the broader crypto market off guard: the XRP Ledger quietly fixed a critical vulnerability that had reportedly been hiding in its code since approximately 2015, and the full details only went public this week.
The XRP Ledger disclosed on October 9 an integer-overflow vulnerability in its payment engine that could have allowed specially crafted transactions to create spendable XRP beyond the network’s intended supply cap.
The disclosure followed an emergency software update released on September 25; XRPL released xrpld 3.4.1 as the fix, adding overflow checks to payment calculations and strengthening the ledger’s “no-XRP-created” invariant — the control intended to ensure transactions cannot generate XRP.
The mechanics of the flaw are unsettling on paper.
The bug involved an unchecked 64-bit integer calculation triggered when a payment consumed many offers from the on-chain order book. If the combined amount exceeded the maximum value, the calculation could wrap to a much smaller number while sellers still received full amounts — and the difference could become newly created XRP.
According to XRPL, an attacker would have needed hundreds of deliberately priced offers, followed by a single payment, to trigger the vulnerable calculation.
The critical reassurance for holders came swiftly.
Both vulnerabilities have been addressed, and XRPL reported no evidence that the critical payment engine bug had been exploited on a public network.
The public disclosure came on October 9, roughly two weeks after the patch shipped, with the team reporting no loss of funds, no compromised keys, and no consensus problems tied to the bug.
The vulnerability had been reported by researcher Cayden Liao and Veria AI through the XRPL Bug Bounty program on September 22, 2026.
A second issue was patched in tandem.
The XRPL also disclosed a flaw affecting the network’s Batch transaction feature that could have disrupted transaction validation.
XRPL addressed that flaw through the fixBatchV1_2 amendment, which requires transactions to use the correct structure.
Beyond the security news, the other headline grabbing XRP watchers is the Evernorth Nasdaq debut.
Evernorth completed its merger with Armada Acquisition Corp. II, entering the public markets with approximately 473 million XRP and approximately $300 million in gross cash proceeds before transaction expenses.
The XRP treasury company expects its common stock to begin trading on Nasdaq on October 12 under the ticker XRPN.
Importantly, XRP itself is not being listed on Nasdaq — XRPN will represent shares in Evernorth, a Ripple-backed company whose strategy centers on holding and actively deploying XRP.
Major backers include Arrington Capital, SBI Group, Ripple, Pantera Capital, Kraken, and GSR.
On the protocol side, agentic payments are also making noise.
Citing his earlier prediction that agentic payments would cross 10 million, a RippleX engineering lead stated that this milestone has been surpassed, as XRPL has now processed over 13 million transactions with more than 160 x402 merchants.
Additionally,
U.S. spot XRP ETFs attracted $11.31 million in net inflows for the week ending October 9, extending a 2026 accumulation trend.
As for price, XRP has faced selling pressure over the same period.
XRP dropped from $1.52 to a low of $1.31 by October 8 — a decline of roughly 14% in less than two days — before recovering to around $1.40.
As of October 11, XRP carries a total market cap of approximately $88.26 billion.
What to watch next: Node operators should confirm they have upgraded to xrpld 3.4.1, as
anyone still running xrpld 3.4.0 or earlier is operating software with a publicly documented supply-breaking flaw — the patched version has been available since September 25.
For traders,
the pre-listing SPAC that will become XRPN dropped 50% in a single day ahead of Evernorth’s Nasdaq debut
, signaling that volatility around the listing itself could be significant. The Evernorth trading debut on October 12, ETF inflow data for the coming week, and whether XRP can reclaim the $1.50 level will be the three factors most worth monitoring in the days ahead.
This article is for information only and is not financial advice. Crypto prices are volatile; always do your own research.