XRP Ledger Foundation Faced with Criticism Over Priced Bounty Payouts
Key Summary
The XRP Ledger Foundation has faced backlash from the crypto community over the $250,000 bounty paid for a critical security bug. Critics argue that the reward is too small for the severity of the bug, which allowed an attacker to create spendable XRP beyond the entire supply. The foundation defends its decision, citing the public nature of the ledger data and the fact that no XRP was created.
Background
The XRP Ledger Foundation is facing criticism over the bounty paid for a critical security bug. The bug allowed an attacker to create spendable XRP beyond the entire supply, according to the foundation's own disclosure report. The fix, version 3.4.1, went out weeks ago. Public binaries were released on September 25.\ \n\n
Criticism
Critics are not focused on the supply claim. They are angry about the payout. One person called the reward an absolute joke and warned that next time hackers will exploit first and ask for a bounty second. Another said the team deserves a bigger reward because the bug was catastrophic.\ A third said the foundation must pay bug finders well, or future hackers will consider the cheaper option instead.\ The sharpest comment said XRP is a scam if a decent bounty is not paid, and that the next flaw might not be disclosed responsibly.\ \n\n
Foundation Response
The foundation says a public fix would have shown attackers where the bug was, and AI makes finding it fast. It says the network, RippleX, core developers, and validators agreed on the plan together. Some users doubted the decentralization claims. One said a company they knew had trouble getting help to change a name within the ledger. Another asked why no safety stop exists if the supply goes above the cap.\ The foundation thanked Cayden Liao and Veria AI for reporting the bug responsibly. It also promised stronger testing and a larger bug bounty program.\ \n\n
Conclusion
Whether this is enough to calm critics remains to be seen. The foundation's decision to skip the amendment process and ship an emergency fix is also under scrutiny. Some users are questioning the decentralization of the network, given the lack of transparency in the decision-making process.