Serious Flaw in XRP Ledger SDK Exposes Private Keys; Foundation Fixes with New Release
- XRP Ledger SDK Had Malicious Code Released
- Update to xrpl.js 4.2.5 fixes serious flaw
- Foundation recommends urgent review of facilities
A critical vulnerability has been discovery in the xrpl.js development kit, a JavaScript library used to interact with the XRP Ledger. The flaw affected versions 4.2.1 to 4.2.4, allowing hackers to gain unauthorized access to private keys of cryptocurrency-linked wallets.
The flaw was caused by malicious code inserted into fake versions of the package in the NPM manager. The manipulation allowed sensitive data to be automatically sent to an external domain. Early detection of the suspicious activity prevented further damage, but thousands of projects and developers using this library were exposed.
The XRP Ledger Foundation confirmed the issue and quickly released version 4.2.5 of the SDK, which removes the backdoor and ensures the security of applications. In addition, it recommended the immediate discontinuation of the compromised versions, reinforcing that the error did not affect the network's main code or the official GitHub repository.
Impacted developers were advised to either update their SDK to the safe version as soon as possible or migrate to an older stable version (2.14.3). Teams that kept versions locked in pnpm-lock.yaml were able to avoid the automatic update to the malicious versions.
Projects such as Xaman Wallet, XRPScan, Bitfrost and Gen3 Games reported that they were not affected by the flaw, either because they use their own libraries or uncompromised versions of the SDK.
This incident reinforces the importance of stricter security practices, especially in the software supply chain associated with the cryptocurrency ecosystem, which has become a constant target of attacks.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Altcoins Gear Up for Profitable Rally
Altcoin holders could be in for major gains as market sentiment turns bullish.Altcoin Holders Anticipate Major GainsWhat’s Fueling the Altcoin Rally?Time to Watch the Altcoin Market Closely

Best Cryptos to Buy Now: Why Qubetics, Cardano, and Toncoin Are Dominating 2025’s Blockchain Revolution
Explore why Qubetics, Cardano, and Toncoin are the best cryptos to buy now in 2025, with groundbreaking innovations and real-world applications.Qubetics ($TICS): Bridging Real-World Assets with BlockchainCardano (ADA): Pioneering Sustainable Blockchain SolutionsToncoin (TON): Revolutionizing Digital InteractionsUnderstanding Real World Asset TokenizationConclusion

Best Crypto to Buy Now: Final Chance to Buy Troller Cat at $0.0000072 Before 20% Jump as Notcoin and Brett Break Out
Troller Cat enters Stage 3 with 69% APY and 7,000% ROI potential while Notcoin and Brett rally.Troller Cat ($TCAT): Staking, Strategy, and Serious GainsNotcoin ($NOT): Massive Community, Real-Time MomentumBrett ($BRETT): Base Chain’s Loudest VoiceConclusion: Which Project Offers the Best Entry Point?

James Wynn’s $46.5M Hyperliquid Trading Streak
James Wynn earns $46.5M in under 2 months on Hyperliquid with high-leverage trades on BTC, PEPE, TRUMP, and more.The Rise of a Trading LegendUnrealized Profits Tell the StoryWhat Makes Wynn’s Strategy Stand Out?

Trending news
MoreCrypto prices
More








