A major flaw in the XRPL was discovered on February 19, 2026, that could have allowed attackers to move funds without private keys. Luckily, the problem was caught just in time, preventing potential losses. The flaw came from the Batch amendment, a recent update to the XRPL protocol.
🚨SCARY: XRPL was one vote away from disaster.
— STEPH IS CRYPTO (@Steph_iscrypto) February 28, 2026
A critical logic flaw in the Batch upgrade could’ve let attackers move funds without private keys.
If it activated, wallets could’ve been drained. It was caught just in time. pic.twitter.com/SAq849WMu5
XRPL Vulnerability Could Have Drained Wallets
The flaw involved a logic error in the Batch upgrade. If attackers had exploited it, they could have forged signatures and emptied wallets without using private keys. Moreover, security experts warn the amendment was just one validator vote away from activation, making this a very close call.
coinfomania.com