XRP Ledger Foundation在其官方JavaScript库中确定了“严重漏洞”

4月22日，区块链安全专家Aikido在博客文章中说，XRP Ledger的开源JavaScript库“被复杂的攻击者妥协”

The XRP Ledger Foundation has identified a “serious vulnerability” in the official JavaScript library used for interacting with the XRP Ledger blockchain network, the nonprofit said.

非营利组织说，XRP Ledger Foundation已在用于与XRP Ledger区块链网络互动的官方JavaScript库中确定了“严重漏洞”。

On April 22, blockchain security specialist Aikido said in a blog post that XRP Ledger’s open-source JavaScript library was “compromised by sophisticated attackers who put in a backdoor to steal cryptocurrency private keys and gain access to cryptocurrency wallets.”

4月22日，区块链安全专家Aikido在博客文章中说，XRP Ledger的开源JavaScript图书馆“受到了复杂的攻击者的妥协，他们妥协了，他们放置了后门来窃取加密货币私钥，并可以访问加密货币钱包。”

The JavaScript library includes programs enabling developers to interact with the XRP Ledger and is distinct from the blockchain network itself.

JavaScript库包括使开发人员与XRP Ledger进行交互的程序，并且与区块链网络本身不同。

“[T]his package is used by hundreds of thousands of applications and websites making it a potentially catastrophic supply chain attack on the cryptocurrency ecosystem,” Aikido said.

Aikido说：“他的包裹被数十万应用程序和网站使用，这使其成为对加密货币生态系统的潜在灾难性供应链攻击。”

The XRP Ledger Foundation has already upgraded the code repository to “remove the previously compromised version,” it said in an April 22 post on the X platform.

XRP Ledger Foundation已经将代码存储库升级为“删除先前折衷的版本”，它在4月22日的X平台上的一篇文章中说。

We've identified a serious vulnerability in the official JavaScript library used for interacting with the XRP Ledger. This package is used by developers to integrate their applications with the XRP Ledger.

我们已经在用于与XRP分类帐互动的官方JavaScript库中确定了严重的漏洞。开发人员使用此软件包将其应用程序与XRP Ledger集成。

Several projects in the XRP Ledger ecosystem—including XRPScan, First Ledger, and Gen3 Games—have confirmed that they are not impacted by this incident.

XRP Ledger生态系统中的几个项目（包括XRPSCAN，FIRST LEDGER和GEN3 GAMES）证实，这些事件并未受到这一事件的影响。

The vulnerability has been patched, and the code repository has been upgraded to remove the previously compromised version.

漏洞已修补，并且已升级代码存储库以删除先前折衷的版本。

The Foundation is committed to the security and stability of the XRP Ledger ecosystem. We are grateful to the researchers at Aikido for their swift discovery and disclosure of this vulnerability.

基金会致力于XRP Ledger生态系统的安全性和稳定性。我们感谢Aikido的研究人员迅速发现和披露这种脆弱性。

We will continue to monitor the situation and provide updates as needed.

我们将继续监视情况并根据需要提供更新。

— XRP Ledger Foundation (@XRPLF) April 22, 2024

- XRP Ledger Foundation（@xrplf）2024年4月22日

It added that several XRP Ledger ecosystem projects — including XRPScan, First Ledger, and Gen3 Games — confirmed that they were not impacted by the incident.

它补充说，包括XRPSCAN，First Ledger和Gen3 Games在内的几个XRP Ledger生态系统项目证实，它们没有受到事件的影响。

The XRP token ended the US trading day up more than 3.5% despite news of the security breach, according to CoinGecko.

据Coingecko称，尽管有消息违反了安全性，但XRP代币还是在美国交易日结束了3.5％以上。

The token has a market capitalization of more than $125 billion and a fully diluted value of approximately $215 billion.

代币的市值超过1,250亿美元，价值约为2150亿美元。

Institutional adoption

机构采用

Launched in 2012, XRP Ledger is among the oldest blockchain networks and specializes in payments and decentralized finance (DeFi) applications for institutions.

XRP Ledger于2012年推出，是最古老的区块链网络之一，专门从事机构的付款和分散融资（DEFI）应用程序。

It has been gaining prominence in recent months as a friendlier US regulatory environment paves the way for broader institutional adoption of the network’s token and ecosystem projects.

作为友好的美国监管环境，近几个月来，它一直在广泛地提高，这为更广泛的机构采用该网络的令牌和生态系统项目铺平了道路。

The XRP token’s price increased by upward of 300% after crypto-friendly US President Donald Trump prevailed in the November presidential election, according to CoinGecko.

据Coingecko称，XRP代币的价格上涨了300％以上，此前美国总统唐纳德·特朗普（Donald Trump）在11月的总统大选中获胜。

Since then, several asset managers have asked the US Securities and Exchange Commission (SEC) to approve US-listed exchange-traded funds (ETFs) holding the XRP token.

从那以后，几家资产经理要求美国证券交易委员会（SEC）批准持有XRP令牌的美国上市交易所交易资金（ETF）。

On April 21, Coinbase listed futures contracts for the XRP token on its US derivatives exchange.

4月21日，Coinbase列出了XRP令牌在其美国衍生工具交易所上的期货合约。