XRP Ledger Node Operators Must Update to Fix Security Flaw

The XRP Ledger team released version 3.2.1 on July 31 to address a specific vulnerability known as a manifest flood. The issue allowed attackers to overwhelm nodes by sending an unlimited number of validator manifests, which consumed memory, bandwidth, and disk space. While the attack acted as a drain on node resources, the network consensus mechanism remained stable and no funds were reported missing during the incident.

Ripple engineering director Vijay Khanna has called for all node operators to complete an urgent two step update process. Operators must first install the new version, allow the server to run for a few minutes, and then perform a second restart. This second step is essential to clear out any malicious data that may have been stored on the system prior to the patch. The update includes four new protections that cap the intake of manifest data and prevent unknown entries from taking up permanent storage.

This security incident highlights the importance of maintaining updated infrastructure as the XRP Ledger continues to grow in account numbers and institutional use. While businesses and node operators must act immediately to protect their systems, ordinary XRP holders do not need to take any action or move their funds. The development team plans to release a detailed technical report on the attack in the near future to provide further clarity for the community.