ZachXBT Criticizes XRPL Foundation Over $250K Bug Bounty

On-chain investigator ZachXBT criticized the XRP Ledger (XRPL) Foundation on October 12, 2026, over its $250,000 bug bounty paid to a white-hat hacker who discovered a critical vulnerability in the network. The flaw could theoretically have allowed an attacker to bypass XRP’s maximum supply limit and create additional tokens beyond the permitted amount. The foundation confirmed that the vulnerability was patched in version 3.4.1 and that no additional XRP had been maliciously minted before the fix. Cheaply paying the whitehat $250K for a critical infinite XRP supply bug when your treasury has billions?