RippleX engineering lead J. Ayo Akinyele disclosed a critical vulnerability in the XRP Ledger payment engine that existed for over 10 years and could have allowed XRP to be minted beyond its fixed supply. The bug was found through a bug bounty program and had not been exploited; the team released xrpld 3.4.1 and completed a network upgrade. XRPL plans to increase proactive security investment, clear technical debt, and advance formal verification.