JavaScript library xrpl.js, was compromised in April 2025 by attackers who inserted a backdoor enabling potential theft of private keys and unauthorized access to wallets

Event date

April 22, 2025

Quotes that support claims

On April 22, blockchain security specialist Aikido said in a blog post that XRP Ledger’s open-source JavaScript library was “compromised by sophisticated attackers who put in a backdoor to steal cryptocurrency private keys and gain access to cryptocurrency wallets.”

According to Eriksen, a backdoor was inserted into recently released versions of a software-development kit used to build applications and interact with the XRP Ledger.

Tags

Week 17 of 2025