A serious vulnerability was discovered in the XRP Ledger before it could reach production, preventing what researchers say might have become one of the most damaging bugs in the network’s history. The issue was found in the proposed Batch amendment, also known as XLS-56, a feature designed to let users bundle multiple actions into one atomic transaction. According to reporting and follow-up security writeups, the flaw could have allowed an attacker to move funds from accounts without needing the victim’s private key under certain conditions.
The bug was identified on February 19 by security researcher Pranamya Keshkamat together with Apex, an autonomous static analysis tool developed by Cantina. The weakness reportedly sat in the amendment’s signature validation logic, specifically in how signers were checked inside batch processing loops. That meant grouped transactions could, in the worst case, bypass intended authorization rules and execute actions that should have been rejected.
What kept the issue from becoming a real exploit was timing and governance. The Batch amendment was still in the XRPL voting process and had not yet gone live on mainnet, so validators were able to vote against activation once the flaw was confirmed. Developers then moved quickly to disable the vulnerable path and patch the code before any attacker could take advantage of it. In practice, that means no wallets were drained and no user funds were reported lost.
The episode is notable not just because of how severe the bug was, but because of how it was found. AI-assisted auditing played a central role in surfacing a logic flaw that might have been missed in traditional review, which is why the story has drawn attention well beyond XRP circles. It also reinforces that proposed protocol upgrades can introduce serious risk even when the base chain itself has been stable for years. In this case, the XRPL process worked as intended: the bug was caught during the amendment stage, validators blocked it, and the network avoided a potentially catastrophic failure.





































































































