- Official developer software infected with pirates for the XRP Ledger blockchain.
- The malicious software versions have since been replaced by own.
A pirate compromised key software used by XRP Ledger Blockchain developers on Monday, putting thousands of user funds in danger, according to Aikido, a crypto security company.
Aikido discovered that a pirate had infected the official manager of the XRP book nodes with malware at 8:53 p.m.
The software is used by “hundreds of thousands of applications and websites, which makes it a potentially catastrophic attack on the supply chain against the cryptocurrency ecosystem,” said Charlie Eriksen, Aikido security researcher, in a report.
New version
According to the XRPL Github, the node package manager was downloaded more than 140,000 times last week.
The software has been updated to a new version designed to replace the compromised versions around 2 p.m. in the United Kingdom on Tuesday.
The same developers who then founded Ripple began to develop XRP Ledger, or XRPL, in 2011. XRP was born from the Blockchain and Ripple project continues to contribute to XRPL, which is decentralized and led by a community of business and developers.
XRPL uses some of the same software as Ethereum and can take care of intelligent contracts, unlike the main ripple blockchain.
DEFI applications on XRPL hold $ 80 million in user deposits.
We do not know how the pirate was able to replace XRPL software with malicious versions. It is also not known how many users have downloaded or have been affected by the malicious software when it was still live.
A Ripple spokesperson led DL News At X messages from the XRP Ledger Foundation, a non -profit organization that strengthens activity and development on the XRPL blockchain.
In the articles, the XRP Ledger Foundation confirmed that the compromise did not affect the XRP Ledger code base or the GitHub repository, and that the malware of the software had been obsolete.
The incident raises concerns about the level of security at XRP Ledger.
In January 2024, the co-founder of Ripple Chris Larsen lost $ 112 million in XRP tokens in a flight that has since been linked to a compromise at Lastpass from the password management software company.
After the price of XRP has climbed 294% in the past year, stolen tokens are now 449 million dollars.
Private key flight
The compromise started when a user called Mukulljangid published five new versions of the XRPL node package manager, without a corresponding version on the XRPL Github, something that Eriksen said was very suspect.
During several version updates, the pirate has implemented the code in the XRPL software designed to steal private keys of the password type which grant access to cryptographic wallets.
If a hacker was to acquire these keys, he could use them to access cryptographic portfolios and transfer funds without the authorization of its owners.
Updates of the multiple version show that the attacker “worked actively on the attack, trying different ways to insert the hidden door while remaining as hidden as possible,” said Eriksen.
In cybersecurity, a stolen door is a secret and undocumented means of bypassing normal security measures to obtain unauthorized access to a system or network.
Eriksen said that malware had been detected by the Aikido public threat flow which uses major language models to monitor and identify if a malicious code is added to new or existing software.
Last year, private key compromises represented the largest part of the crypto stolen at 43.8%, according to a report by the Safety Society of Crypto Chainalysis.
Updated on April 23: The title and text have been modified to approach the large XRP book held by Ripple. Ripple is a contributor to the blockchain.
Tim Craig is the DL News -based correspondent, based in Edinburgh. Handle with advice Tim@dlnews.com.
