The XRP LEDGER Foundation has revealed a major security incident involving one of its main developer tools – a widely used JavaScript library to create applications on the XRP blockchain.
The non -profit organization said that He deleted a compromised version of the software after the researchers discovered a stolen door that could fly Private user keys.
The cybersecurity company Aikido reported that sophisticated attackers had discreetly inserted malware into the open source library, which is used by “hundreds of thousands” of websites and applications that interact with the big book. The code could have allowed unauthorized access to the wallets and the cryptocurrency kept there.
For users of the 2.14.x branch, we have just published a updated NPM package to delete the previously compromised version. If you use the 2.14.x branch, please update up to 2.14.3 immediately:https://t.co/zgcispf8px
– XRP LEDGER Foundation (Official) (@XRPLF) April 22, 2025
The library itself does not perform the network, but acts as a bridge helping developers to read and write data on the network. Vulnerability is equivalent to a supply chain attack – an increasingly common tactic in which hackers compromise the third -party code invoked by many services.
This package is used by hundreds of thousands of applications and websites, making it a potentially catastrophic supply chain attack against cryptocurrency ecosystem. Aikido said in a blog article detailing the violation.
The company has published screenshots of the Rogue code and explained how it was disguised to look like a legitimate package.
The XRP LEDGER Foundation cleans the code
The Foundation responded by quickly publishing a cleaned version of the library and updating its official code repository.
In a monitoring article on the Microblogging X (formerly Twitter) platform, the Foundation said it confirmed that several key ecosystem projects, including XRPSCAN, FIRST LEDGER and GEN3 GAMES, were not affected by the feat.
Despite fear, the price of XRP has increased by almost 7% in the last 24 hours, in the midst of a broader recovery in the cryptocurrency market which experienced the price of BTC overvoltage at nearly $ 93,000 at the time of the editorial staff.
Launched in 2012, XRP LEDGER is one of the first blockchain networks focused on decentralized payments and finances. He has seen a renewal of institutional interest in the United States Despite a recent breakdownWith asset managers pursuing negotiated fundraising funds linked to the token and Coinbase launching XRP Futures trading on its exchange of derivatives.
