Hacker’s Dream: XRP Devs Warn of Massive Backdoor Threat, Your Data Could Be Gone!

by

Well, well, well… It seems like the XRP community has just been hit with a little surprise—courtesy of Aikido Security, the “saviors” of digital integrity. This time, it’s not a cute little bug, but a full-on, stealthy backdoor lodged inside the official XRPL NPM package.

Aikido Security, doing its best superhero impersonation, tweeted about this nifty little backdoor that grabs private keys like a pickpocket in the night, and sends them off to hackers. As you can guess, all XRP developers and projects are now scrambling to avoid a financial apocalypse.

“Be aware. Make sure your project is not using the latest npm version, as it will compromise all accounts created with the library”
— Thomas Silkjær (@Silkjaer) April 22, 2025

So, what’s the damage? Aikido Security found out that versions 4.2.1 to 4.2.4 of the XRPL NPM package have been thoroughly compromised. Those versions are as dangerous as a cat with a loaded cannon, including 4.2.4, 2.14.2, 4.2.3, 4.2.2, and 4.2.1. If you’re using any of these, well, good luck to you.

Thomas Silkjaer, the Head of Analytics and Compliance at InFTF, didn’t waste any time. He re-shared the warning, making it clear: “Don’t update! Your accounts could be toast if you do.” Well, at least he’s blunt.

What’s Going On?

Then, in a voice of reason (and probably a touch of panic), Vet, an XRPL dune validator, chimed in with their warning: “XRP Ledger Devs and Projects—if you use XRPL JS library, don’t update or use any version 4.2.1 or higher. It’s compromised. Any project using the latest version is playing Russian roulette with user funds. Get the word out!”

But wait, t “If you’re using Xaman Wallet, don’t worry. We’re safe. Xaman uses its own secure infrastructure and doesn’t rely on those shifty third-party libraries to handle sensitive stuff like private keys. Xaman users, you can keep calm.” Ah, what a relief. Someone’s actually doing their job.

Read More

2025-04-22 16:47