Connect with us
  • tg

Cryptocurrency

XRP Ledger SDK Compromised by Backdoor Exploit

letizo News

Published

on

The XRP Ledger Foundation has warned about a security vulnerability in the official JavaScript SDK, which interacts with the XRPL.

On April 21, Aikido Security revealed that several versions of its Node Package Manager (NPM) software were compromised and published, containing a backdoor that could steal private keys from users.

Security Flaw in Developer Kit

The XRP Ledger Foundation confirmed the issue in an April 22 statement:

“Earlier today, a security researcher from @AikidoSecurity identified a serious vulnerability in the xrpl npm package (v4.2.1-4.2.4 and v2.14.2).”

In response to the breach, Wietse Wind, founder and CEO of XRPL Labs, reassured users that Xaman Wallet was not affected by the flaw. Wind explained that the product does not use xrpl.js but instead relies on its xrpl-client and xrpl-accountlib libraries, which separate wallet connectivity from the signing process.

He also detailed how the incident unfolded, stating that malicious code in the xrpl.js package sent generated or imported private keys to an external server controlled by the attacker. This enabled hackers to collect key pairs, wait for the wallets to be funded, and then steal the assets.

Wind urged anyone who had recently created an XRP wallet using the API or related tools to assume it had been compromised and to transfer their funds immediately.

He emphasized that such attacks can happen to any software relying on third-party libraries, and that developers must take precautions. He also advised limiting publishing access, scanning code before release, avoiding auto-publishing pipelines, and not managing private keys directly unless fully prepared to handle the associated risks.

XRPL Issues Urgent Patch

Following the incident, the XRP Ledger Foundation has released a clean version of the NPM package, removing the malicious code and ensuring the SDK is safe for developers to use again.

Aikido Security discovered the vulnerability after its automated threat monitoring system flagged suspicious updates to the XRPL package on NPM. These updates, published by a user named “mukulljangid”, included five new versions that did not match any official releases on the XRP Ledger’s GitHub repository.

After investigating, Aikido found that the compromised versions contained a malicious function called checkValidityOfSeed, which sent private keys to the hacker’s server at 0x9c[.]xyz, when users created a wallet that could allow them to steal their crypto.

Early versions (v4.2.1 and v4.2.2) hid the backdoor in compiled JavaScript files, while later versions (v4.2.3 and v4.2.4) embedded the malicious code directly in TypeScript source files, making it harder to detect. The compromised packages also removed development tools like Prettier and build scripts from the package.json file, showing intentional manipulation.

The incident comes only weeks after Ripple announced a $1.25 billion acquisition of prime brokerage firm Hidden Road, a move experts believe will turn XRPL into a major conduit for institutional funds.

According to Ripple CEO Brad Garlinghouse, the network will be used for post-trade settlements on some transactions, potentially turning it into a corporate-scale clearing and credit platform.

SPECIAL OFFER (Sponsored)
Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Cryptocurrency

FTX Wants to Block Claims from 49 Countries, Including China: Users Rage

letizo News

Published

on

Bankrupt crypto exchange FTX is asking the court to greenlight a plan that could potentially deny billions in creditor repayments to users in 49 countries where crypto faces legal restrictions.

This could disproportionately impact Chinese users, who reportedly represent 82% of the affected claim value.

Navigating Legal Minefields in Restricted Jurisdictions

The FTX proposal, detailed in a July 2 court filing, is seeking authorization to designate 49 countries, including China, Russia, Afghanistan, and Ukraine, as “Potentially Restricted Jurisdictions.”

While claims from these regions will be automatically treated as “disputed,” the FTX Trust will first seek legal opinions for each jurisdiction, and in cases where distribution is deemed legally permissible, payouts will proceed.

However, where legal advice indicates distributing funds would violate local laws, the Trust will issue a formal notice to affected creditors. These users will then have a 45-day window to file a formal objection, including submitting it to a U.S. court.

According to the document, if a jurisdiction is ultimately deemed “restricted” and a claimant remains a resident there when repayments are processed, their funds and any associated interest “shall be immediately forfeited and revert to the FTX Recovery Trust.”

The submission has triggered significant backlash from affected users. While the FTX Recovery Trust is positioning it as a legal compliance issue, others argue it raises serious ethical questions.

“FTX accepted users from China when things were fine,” wrote one X user. “Now denying their claims entirely because of ‘restricted jurisdiction’ feels unfair.”

He described creditors from the beleaguered countries as “victims” who still deserved to be repaid.

Another Chinese claimant, going by the username “Will,” also argued forcefully against the rationale:

“While mainland China does not support cryptocurrency trading, residents… are allowed to hold cryptocurrencies… The claims process uses USD for settlement… they are allowed to hold USD overseas. So why isn’t wire transfer settlement supported?”

Meanwhile, others expressed despair, with one user asking, “Is there anything that could be done? Or they just steal all of the money?” FTX creditor advocate Sunil suggested that selling or transferring the claim to someone in an allowed jurisdiction might be a potential workaround.

Ongoing Repayments

While the controversy rages on, other creditors have been making progress with their payments. As per a July 1 update, those with claims under $50,000 have already received 120% payouts, while larger claimants received 72.5% in May. The remaining 27.5% is expected through distributions extending into 2027.

Meanwhile, the fallout from FTX’s 2022 collapse continues to resolve elsewhere, with most celebrity endorsement lawsuits dismissed, though retired NBA star Shaquille O’Neal settled for $1.8 million.

SPECIAL OFFER (Sponsored)
Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Continue Reading

Cryptocurrency

This Critical Binance Metric Suggests Incoming Surprises for Bitcoin: What You Need to Know

letizo News

Published

on

Binance’s net taker volume surged past $100 million just ahead of the latest US Nonfarm Payrolls (NFP) report.

Such a trend points to aggressive buying as traders position for a key macroeconomic catalyst.

Binance Sees Aggressive Buy Orders

In its latest analysis, CryptoQuant revealed thaft this spike reflects large market buy orders on Binance, indicating strong bullish sentiment or speculative bets on continued market momentum.

The US labor market report, released shortly after, showed Nonfarm Payrolls increasing by 147,000 in June. This figure exceeded analysts’ expectations of 110,000-118,000. The unemployment rate also fell to 4.1% from 4.2% in May and was the lowest level since February, according to the Bureau of Labor Statistics.

The stronger-than-expected employment data reduces the chances of near-term rate cuts, ultimately backing the Fed’s plan to maintain higher rates to control inflation. Market-implied probabilities now reveal a 95% chance the Fed will hold rates steady at its July meeting, as it rose from 75% before the jobs report was released.

A resilient jobs market has strengthened the US dollar, as expectations of delayed or reduced interest rate cuts make the currency more attractive relative to others.

Historically, strong NFP data and hawkish Fed expectations have weighed on risk assets, including Bitcoin, as a firmer dollar environment tends to reduce the relative appeal of alternative assets.

The combination of Binance’s aggressive buy-side activity and the strong jobs report could pave the way for potential volatility in crypto markets as traders assess the Fed’s policy outlook and the broader macro environment.

After US jobs data beat forecasts, Bitcoin briefly climbed above $110K before retreating to $108.8K.

July Seasonality Fuel Optimism

As per crypto analyst Daan Crypto Trades’ observation, holding above $108K is critical for the leading crypto asset to avoid a downward spiral. He considers a close near the $110K region a healthy sign.

Meanwhile, Matrixport noted that July has historically been a strong month for Bitcoin, as 7 out of the last 10 Julys have closed positively and have an average return of over 9.1%. Supported by the improving Fed outlook and post-July 4 optimism, the next few weeks could offer a final push higher before another round of consolidation. The Greed & Fear Index is also bottoming out, a signal that often precedes upward momentum in Bitcoin’s price.

SPECIAL OFFER (Sponsored)
Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Continue Reading

Cryptocurrency

Chainlink’s Consolidation Echoes Bitcoin’s 2023 As Retail Apathy Meets Whale Hunger

letizo News

Published

on

Chainlink (LINK) remains locked in a $12-$15 price stalemate, owing to the continued whale accumulation amid retail disengagement.

On-chain data shows sustained negative exchange netflows of around 100,000 LINK per week, which indicates that whale entities are absorbing sell pressure without significant price disruption.

LINK Faces Critical Test

CryptoQuant stated that this trend contrasts with occasional retail-driven spikes, such as March 2025’s 5 million LINK deposit surge. Retail activity has stayed flat, as evidenced by the daily active addresses hovering between 28,000 and 32,000, while transaction counts remain stagnant at around 9,000 per day. Despite increased oracle utility, retail failed to capitalize on a minor activity bump seen in late 2024.

Whale urgency is evident as exchange withdrawals peaked at 3,000 transactions per day in Q4 2024 and remain elevated, thereby steadily draining exchange reserves, which have fallen approximately 40% year-to-date. Neutral leverage metrics are preventing volatility and have allowed systematic accumulation without triggering a breakout above $15.

A resolution to this deadlock will require a spike in retail participation to ignite momentum or a slowdown in whale withdrawals to weaken accumulation. Until a catalyst emerges, LINK’s structure matches Bitcoin’s 2023 consolidation phase before its surge in 2024.

While this accumulation standoff continues on-chain, Chainlink has been expanding its broader ecosystem through partnerships.

Collaborations With Mastercard and Visa

Last month, the decentralized oracle network partnered with Mastercard to allow 3 billion cardholders to purchase crypto directly on-chain using fiat payments. The collaboration utilizes interoperability infrastructure and Mastercard’s global network to remove barriers to crypto access.

Partners like Zerohash, Shift4, Swapper Finance, and XSwap support liquidity, compliance, and fiat-to-crypto conversion, bridging traditional payments with decentralized finance environments.

Chainlink also completed a pilot under the HKMA’s e-HKD+ initiative with Visa, wherein the duo tested cross-border investment transactions using CBDCs and stablecoins. In the trial, ANZ’s AUD-backed stablecoin A$DC was converted into e-HKD and used to invest in a tokenized money market fund.

Chainlink’s CCIP enabled asset transfers between ANZ’s private blockchain and Ethereum’s public testnet, while Visa’s VTAP managed the token lifecycle. The pilot demonstrated instant, compliant investment fund access, which reduced settlement times from days to just seconds, even on weekends.

SPECIAL OFFER (Sponsored)
Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Continue Reading

Trending

©2021-2024 Letizo All Rights Reserved