Connect with us
  • tg

Cryptocurrency

XRP Ledger SDK Compromised by Backdoor Exploit

letizo News

Published

on

The XRP Ledger Foundation has warned about a security vulnerability in the official JavaScript SDK, which interacts with the XRPL.

On April 21, Aikido Security revealed that several versions of its Node Package Manager (NPM) software were compromised and published, containing a backdoor that could steal private keys from users.

Security Flaw in Developer Kit

The XRP Ledger Foundation confirmed the issue in an April 22 statement:

“Earlier today, a security researcher from @AikidoSecurity identified a serious vulnerability in the xrpl npm package (v4.2.1-4.2.4 and v2.14.2).”

In response to the breach, Wietse Wind, founder and CEO of XRPL Labs, reassured users that Xaman Wallet was not affected by the flaw. Wind explained that the product does not use xrpl.js but instead relies on its xrpl-client and xrpl-accountlib libraries, which separate wallet connectivity from the signing process.

He also detailed how the incident unfolded, stating that malicious code in the xrpl.js package sent generated or imported private keys to an external server controlled by the attacker. This enabled hackers to collect key pairs, wait for the wallets to be funded, and then steal the assets.

Wind urged anyone who had recently created an XRP wallet using the API or related tools to assume it had been compromised and to transfer their funds immediately.

He emphasized that such attacks can happen to any software relying on third-party libraries, and that developers must take precautions. He also advised limiting publishing access, scanning code before release, avoiding auto-publishing pipelines, and not managing private keys directly unless fully prepared to handle the associated risks.

XRPL Issues Urgent Patch

Following the incident, the XRP Ledger Foundation has released a clean version of the NPM package, removing the malicious code and ensuring the SDK is safe for developers to use again.

Aikido Security discovered the vulnerability after its automated threat monitoring system flagged suspicious updates to the XRPL package on NPM. These updates, published by a user named “mukulljangid”, included five new versions that did not match any official releases on the XRP Ledger’s GitHub repository.

After investigating, Aikido found that the compromised versions contained a malicious function called checkValidityOfSeed, which sent private keys to the hacker’s server at 0x9c[.]xyz, when users created a wallet that could allow them to steal their crypto.

Early versions (v4.2.1 and v4.2.2) hid the backdoor in compiled JavaScript files, while later versions (v4.2.3 and v4.2.4) embedded the malicious code directly in TypeScript source files, making it harder to detect. The compromised packages also removed development tools like Prettier and build scripts from the package.json file, showing intentional manipulation.

The incident comes only weeks after Ripple announced a $1.25 billion acquisition of prime brokerage firm Hidden Road, a move experts believe will turn XRPL into a major conduit for institutional funds.

According to Ripple CEO Brad Garlinghouse, the network will be used for post-trade settlements on some transactions, potentially turning it into a corporate-scale clearing and credit platform.

SPECIAL OFFER (Sponsored)
Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Cryptocurrency

CLAPS Levels up Crypto Gambling: New Sportsbook, Instant Deposits & 35 Free Spins

letizo News

Published

on

[PRESS RELEASE – Hamchako, Mutsamudu, the Autonomous Island of Anjouan, Union of Comoros, June 3rd, 2025]

CLAPS Casino keeps raising the bar. The platform now combines a full-fledged crypto-native sportsbook with fast deposits, a no-strings-attached welcome bonus, and over 2,500 games — all wrapped in a slick, privacy-first experience.

The platform features games from established providers such as Pragmatic Play, Evolution, and Hacksaw Gaming, including offerings like slots, roulette, blackjack, live dealer experiences, and high-stakes tables. The platform is designed to cater to a broad range of users, from casual participants to experienced digital asset enthusiasts.

CLAPS has launched its own sportsbook. Bettors can now place single, combo, or system bets in BTC, ETH, USDT, BNB, SOL, and more — pre-match or live. Bets are processed off-chain for speed, while deposits and withdrawals stay on-chain for transparency.

Getting started

Users can fund their accounts via any crypto wallet or purchase digital assets directly on the platform using a bank card or Apple Pay, facilitated by MoonPay integration. The process does not require wallet connections or know-your-customer (KYC) verification.

New users are eligible for an introductory offer that includes a 170% bonus on the first deposit (up to 1,000 USDT) and 35 spins on the game ‘Gates of Olympus,’ with no wagering requirements.

Licensed in Anjouan, CLAPS also supports responsible gambling tools, has 24/7 customer service, and runs a CPA affiliate program for content creators and partners.

About CLAPS

CLAPS is a crypto-native iGaming platform built to offer a seamless, transparent, and high-speed experience for digital asset users. Designed with a web3-first approach, CLAPS combines on-chain transparency with the performance of off-chain systems to deliver a user-centric environment for gaming and sports betting. The platform supports a wide range of popular cryptocurrencies and includes integrated wallet solutions to simplify user onboarding. CLAPS also provides partnership opportunities through its affiliate program, fostering growth within the decentralized gaming ecosystem.

SPECIAL OFFER (Sponsored)
Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Continue Reading

Cryptocurrency

Big News for Ripple and RLUSD: Details Here

letizo News

Published

on

TL;DR

  • Ripple took center stage today (June 3), but this time, thanks to a major development involving its stablecoin.
  • The move comes a few days after Bitget enabled trading services with the product, thus joining the list of other well-known crypto exchanges that have embraced it in recent months.

Dubai Says ‘Yes’

Ripple’s stablecoin, dubbed RLUSD, was recognized by the Dubai Financial Services Authority (DFSA) as a crypto token within the Dubai International Financial Center (DIFC). 

“This approval reinforces RLUSD’s position as a trusted, enterprise-grade stablecoin, built with regulatory compliance, utility, and transparency at its core,” Ripple emphasized in its official announcement. 

Jack McDonald, Senior Vice President of Stablecoins at the company, described the approval as proof of the firm’s commitment “to building a stablecoin that meets the highest standards of trust, transparency, and utility.” 

“With regulation-first design and enterprise-grade features, RLUSD is uniquely positioned to drive institutional use of blockchain technology across global markets, starting with cross-border payments,” he added.

The green light from Dubai allows other DFSA-licensed entities within the DIFC area to incorporate the product into their operations.

The Dubai International Financial Centre (DIFC) is a special economic zone that serves as a financial hub for the Middle East, Africa, and South Asia (MEASA) region. It operates under its own legal system and courts, while businesses within the area benefit from a 0% corporate tax rate on qualifying income and no restrictions on capital repatriation.

In August last year, Ripple strengthened its global presence by partnering with the DIFC. A few months later, it received in-principle approval from the Dubai regulator to expand its services within the special economic area.

RLUSD’s Previous Achievements

The stablecoin pegged 1:1 to the US dollar officially saw the light of day in December of last year. Initially, the exchanges that allowed trading services with it included Uphold, Bitso, Moonpay, Bitstamp, and others.

Later on, well-known names such as Gemini and Kraken also followed suit. As CryptoPotato reported last week, the latest to hop on the bandwagon was Bitget, which listed the RLUSD/USDT and RLUSD/USDC pairs. 

Despite that, Ripple’s financial product remains an insignificant player in the stablecoin niche, with a market cap of around $310 million. This represents a mere 0.12% of the industry’s $250 billion capitalization.

It is important to note that Ripple supposedly tried to increase its presence in the stablecoin sector by acquiring Circle (the company behind USDC). Several reports indicated that the company is ready to pay over $10 billion to close the deal.

However, Circle rejected the speculation, saying that it was not for sale. It also plans to go public through an IPO in the United States.

SPECIAL OFFER (Sponsored)
Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Continue Reading

Cryptocurrency

Bitcoin Derivatives Market Shows Signs of Overheating, Further Pain Incoming? (Bitfinex)

letizo News

Published

on

Over the last almost two weeks, bitcoin has been experiencing its first meaningful correction since the recovery from April lows. The asset has dropped about 8% from its all-time high (ATH), marking a cool-off period from what analysts at the crypto exchange Bitfinex called one of the sharpest recovery rallies in recent history.

While the cryptocurrency continues to retrace its steps, the Bitcoin derivatives market is showing signs of overheating. This implies that the market is expecting heightened volatility and, possibly, deeper correction ahead, triggered by macro headwinds and structural profit-taking.

Overheating in the Bitcoin Derivatives Market

According to a report by Bitfinex, open interest in the options market surged to an all-time high of $49.4 billion last week, adding $25.8 billion within a few weeks. At some point, the figure was $6 billion higher than the ATH set in January. The open interest of Bitcoin perpetuals also rallied as BTC hit a new all-time high.

“The point here is that the notable uptick in derivatives activity signals expanding institutional participation, and, as it comes in the wake of Bitcoinʼs recent rally to new all-time highs, indicates that market participants are increasingly positioned for elevated volatility,” Bitfinex analysts stated.

Currently, options open interest has plummeted to $39 billion, although mostly due to the May 29 options expiry. However, the high open interest still highlights rising institutional activity and increased hedging following Bitcoin’s recent price peak. Investors are speculating about BTC’s next move, wondering whether it will continue its bullish trajectory or undergo a further correction.

Bitfinex stated that the open interest in Bitcoin perpetuals is one of the catalysts leading to the plunge in prices, as several long positions have been liquidated. Another reason is the aggressive profit-taking by investors over the past week.

Short-Term Turbulence

Despite the level of profit-taking observed, the unrealized profit in the Bitcoin market is currently higher than average, as indicated by the Relative Unrealized Profit metric. This indicator measures the scale of paper profits across the network relative to market capitalization. The Relative Unrealised Profit metric is in a region that has marked the onset of euphoric but short-lived phases in past cycles.

The metric suggests that while BTC could see more upside in the short term, investors are likely to lock in profits by selling, triggering significant volatility. This increases the possibility of short-term turbulence, according to Bitfinex analysts, which can only be offset by sustained demand.

Regardless of the market’s state, BTC remains structurally strong, with significant momentum.

SPECIAL OFFER (Sponsored)
Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Continue Reading

Trending

©2021-2024 Letizo All Rights Reserved