XRP Ledger Foundation在其官方JavaScript庫中確定了“嚴重漏洞”

4月22日，區塊鏈安全專家Aikido在博客文章中說，XRP Ledger的開源JavaScript庫“被複雜的攻擊者妥協”

The XRP Ledger Foundation has identified a “serious vulnerability” in the official JavaScript library used for interacting with the XRP Ledger blockchain network, the nonprofit said.

非營利組織說，XRP Ledger Foundation已在用於與XRP Ledger區塊鍊網絡互動的官方JavaScript庫中確定了“嚴重漏洞”。

On April 22, blockchain security specialist Aikido said in a blog post that XRP Ledger’s open-source JavaScript library was “compromised by sophisticated attackers who put in a backdoor to steal cryptocurrency private keys and gain access to cryptocurrency wallets.”

4月22日，區塊鏈安全專家Aikido在博客文章中說，XRP Ledger的開源JavaScript圖書館“受到了複雜的攻擊者的妥協，他們妥協了，他們放置了後門來竊取加密貨幣私鑰，並可以訪問加密貨幣錢包。”

The JavaScript library includes programs enabling developers to interact with the XRP Ledger and is distinct from the blockchain network itself.

JavaScript庫包括使開發人員與XRP Ledger進行交互的程序，並且與區塊鍊網絡本身不同。

“[T]his package is used by hundreds of thousands of applications and websites making it a potentially catastrophic supply chain attack on the cryptocurrency ecosystem,” Aikido said.

Aikido說：“他的包裹被數十萬應用程序和網站使用，這使其成為對加密貨幣生態系統的潛在災難性供應鏈攻擊。”

The XRP Ledger Foundation has already upgraded the code repository to “remove the previously compromised version,” it said in an April 22 post on the X platform.

XRP Ledger Foundation已經將代碼存儲庫升級為“刪除先前折衷的版本”，它在4月22日的X平台上的一篇文章中說。

We've identified a serious vulnerability in the official JavaScript library used for interacting with the XRP Ledger. This package is used by developers to integrate their applications with the XRP Ledger.

我們已經在用於與XRP分類帳互動的官方JavaScript庫中確定了嚴重的漏洞。開發人員使用此軟件包將其應用程序與XRP Ledger集成。

Several projects in the XRP Ledger ecosystem—including XRPScan, First Ledger, and Gen3 Games—have confirmed that they are not impacted by this incident.

XRP Ledger生態系統中的幾個項目（包括XRPSCAN，FIRST LEDGER和GEN3 GAMES）證實，這些事件並未受到這一事件的影響。

The vulnerability has been patched, and the code repository has been upgraded to remove the previously compromised version.

漏洞已修補，並且已升級代碼存儲庫以刪除先前折衷的版本。

The Foundation is committed to the security and stability of the XRP Ledger ecosystem. We are grateful to the researchers at Aikido for their swift discovery and disclosure of this vulnerability.

基金會致力於XRP Ledger生態系統的安全性和穩定性。我們感謝Aikido的研究人員迅速發現和披露這種脆弱性。

We will continue to monitor the situation and provide updates as needed.

我們將繼續監視情況並根據需要提供更新。

— XRP Ledger Foundation (@XRPLF) April 22, 2024

- XRP Ledger Foundation（@xrplf）2024年4月22日

It added that several XRP Ledger ecosystem projects — including XRPScan, First Ledger, and Gen3 Games — confirmed that they were not impacted by the incident.

它補充說，包括XRPSCAN，First Ledger和Gen3 Games在內的幾個XRP Ledger生態系統項目證實，它們沒有受到事件的影響。

The XRP token ended the US trading day up more than 3.5% despite news of the security breach, according to CoinGecko.

據Coingecko稱，儘管有消息違反了安全性，但XRP代幣還是在美國交易日結束了3.5％以上。

The token has a market capitalization of more than $125 billion and a fully diluted value of approximately $215 billion.

代幣的市值超過1,250億美元，價值約為2150億美元。

Institutional adoption

機構採用

Launched in 2012, XRP Ledger is among the oldest blockchain networks and specializes in payments and decentralized finance (DeFi) applications for institutions.

XRP Ledger於2012年推出，是最古老的區塊鍊網絡之一，專門從事機構的付款和分散融資（DEFI）應用程序。

It has been gaining prominence in recent months as a friendlier US regulatory environment paves the way for broader institutional adoption of the network’s token and ecosystem projects.

作為友好的美國監管環境，近幾個月來，它一直在廣泛地提高，這為更廣泛的機構採用該網絡的令牌和生態系統項目鋪平了道路。

The XRP token’s price increased by upward of 300% after crypto-friendly US President Donald Trump prevailed in the November presidential election, according to CoinGecko.

據Coingecko稱，XRP代幣的價格上漲了300％以上，此前美國總統唐納德·特朗普（Donald Trump）在11月的總統大選中獲勝。

Since then, several asset managers have asked the US Securities and Exchange Commission (SEC) to approve US-listed exchange-traded funds (ETFs) holding the XRP token.

從那以後，幾家資產經理要求美國證券交易委員會（SEC）批准持有XRP令牌的美國上市交易所交易資金（ETF）。

On April 21, Coinbase listed futures contracts for the XRP token on its US derivatives exchange.

4月21日，Coinbase列出了XRP令牌在其美國衍生工具交易所上的期貨合約。