XRP Ledger Foundation Addresses SDK Vulnerability, Issues Urgent Fix

Security firm Aikodo has warned XRP Ledger developers of a critical vulnerability in the XRPL SDK (software development kit) that could allow hackers to steal private keys. The vulnerability was identified in versions 4.2.1-4.2.4 and affects the official XPRL NPM package. Aikido’s investigation revealed that bad actors had introduced backdoor functionality into the package, potentially leading to a large-scale attack in the crypto industry.