Hacker attacks serious supply chain targeting XRP Ledger of Ripple

Ripple has confirmed a serious supply chain attack targeting the XRP Ledger ecosystem (XRPL), specifically aimed at DeFi wallets using the official xrpl.js software package from NPM (Node Package Manager). This vulnerability does not affect the entire XRPL, but only impacts certain DeFi wallets that rely on the library that has been compromised with malware.

The incident was first discovered by the blockchain security company Aikido, when they identified 5 suspicious updates on the xrpl.js package — the official (SDK) development toolkit of Ripple, which is downloaded over 140,000 times each week. The hacker had installed a sophisticated backdoor in this package, allowing them to steal private keys and gain unauthorized access to users' wallets.

Although it is not clear how many users were affected, Ripple stated that they have stopped using the compromised versions and warned the development community about this serious risk.

It is worth noting that, although the security flaw does not directly affect XRPL, it spreads through Ripple's official channels, causing many developers and DeFi users to potentially be affected without realizing it.

Supply Chain Attack – A Silent Threat

This attack is a typical example of a supply chain attack – where hackers target development tools instead of end users. When a popular NPM package gets infected with malware, thousands of applications and projects that depend on that package will also inadvertently become victims.

In this case, DeFi wallets on XRPL are currently holding around 80 million USD in deposits. Just a small portion of this amount being accessed unlawfully could lead to serious consequences.

Mr. David Schwartz – the Chief Technology Officer of Ripple – issued an official warning. Senior software engineer Mayukha Vadari also disclosed technical details related to the vulnerability. Meanwhile, the XRP Ledger Foundation confirmed that many major DeFi wallets did not use the infected package, and stated that a full analysis report will be published soon.

Additionally, hackers also infiltrated the official library used by DeFi protocols to interact with XRP, indicating that this is a complex, organized campaign that could have significant repercussions for the XRP ecosystem.

Disclaimer: This article is for informational purposes only and should not be considered investment advice. Investors should do thorough research before making any decisions. We are not responsible for your investment decisions.