XRP Ledger Foundation advised all projects to upgrade immediately to version 4.2.5 of xrpl.js, which was released to mitigate the security risks identified on the compromised versions during the April 2025 incident

News event
Claim

Event date

April 22, 2025

Quotes that support claims

"To clarify: This vulnerability is in xrpl.js, a JavaScript library for interacting with the XRP Ledger. It does NOT affect the XRP Ledger codebase or Github repository itself. Projects using xrpl.js should upgrade to v4.2.5 immediately," the foundation wrote in a separate post.
The XRP Ledger Foundation has already upgraded the code repository to “remove the previously compromised version,” it said in an April 22 post on the X platform.

Tags

04/22/2025
Week 17 of 2025