XRP Ledger Nodes Face 'Emergency' Validator Manifest Attack...Ripple: "Update to v3.2.1 Immediately"

▲ XRP, Security/AI Generated Image

XRP Ledger nodes have been exposed to a mass influx attack involving validator manifests. In response, Ripple has warned node operators to immediately install version 3.2.1.

According to U.Today on August 2 (local time), Vijay Khanna, Director of Engineering at Ripple, urged XRP Ledger node operators to update promptly. Khanna stated, “3.2.1 includes an urgent fix to prevent mass influx attacks of validator manifests.”

The attack was observed on the XRP Ledger on July 31. Existing nodes accepted manifests sent by unregistered validator keys without quantity limits. The issue of re-transmitting stored information to other nodes was also revealed.

Version 3.2.1 adds four levels of restrictions. It rejects manifests exceeding the expected size and discards incoming bundles that exceed the allowed quota. It also limits the size of manifests sent to new peers. If 100 unregistered keys accumulate in the cache, no additional keys are accepted.

Manifests from unregistered keys are also not stored on disk. This measure blocks the path for attack information to persist after a node restart. Ripple advised verifying xrpld operation for 1-2 minutes after installing 3.2.1, then emphasized that xrpld must be restarted.

XRP Ledger validators use a master key to represent their identity and a temporary key to sign validation messages. A manifest is signed information that proves the relationship between these two keys. Version 3.2.1 has blocked the attack path by limiting the storage and propagation of unregistered validator information.

[Key Article Summary]

-A mass transmission attack of validator manifests was observed on the XRP Ledger.

-Ripple urged node operators to immediately install version 3.2.1.

-The update limits unregistered keys to 100 and blocks the storage of attack information on disk.

*Disclaimer: This article is for investment reference only, and we are not responsible for any investment losses based on it. This content should be interpreted for informational purposes only.*