Implications for users and developers

Data block

Collection item

Aikido Security researcher Charlie Eriksen urged developers to assume that any private keys or seed phrases handled by xrpl.js versions 4.2.1–4.2.4 and 2.14.2 have been compromised
Several XRP ecosystem projects, including Xaman Wallet, XRPScan, First Ledger, and Gen3 Games, confirmed that their systems were likely not affected by the vulnerability at the center of the April 2025 XRP Ledger security incident
Charlie Eriksen from Aikido Security advised that affected users of the April 2025 XRP Ledger security incident should migrate assets to new wallets generated with secure versions of the software

Data source type

Collection data source

Filter

{"where":{"AND":[{"attribute":"Jfmby78N4BCseZinBmdVov","is":"KeG9eTM8NUYFMAjnsvF4Dg"}]}}

Referenced by

XRP Ledger Foundation warns of XRPL JS vulnerability

Crypto news

News story