Several XRP ecosystem projects, including Xaman Wallet, XRPScan, First Ledger, and Gen3 Games, confirmed that their systems were likely not affected by the vulnerability at the center of the April 2025 XRP Ledger security incident
Claim
Quotes that support claims
He noted that the potential attack would be limited to third-party services that updated to the malicious versions within a short window. The backdoor also appears to be limited only to versions of the code on Node Package Manager (NPM), a GitHub-like tool used by developers to share reusable JavaScript packages for Node.js projects. Several projects related to XRP, including Xaman Wallet and XRPScan, noted that their services are likely secure.
It added that several XRP Ledger ecosystem projects — including XRPScan, First Ledger, and Gen3 Games — confirmed that they were not impacted by the incident.
Referenced by
Implications for users and developers
Crypto news
Data block