Demystifying XRP Supply: The Truth Behind the Security Update

A recent security patch for the XRP Ledger sparked community discussions, leading the XRP Ledger Foundation to issue a clarification addressing concerns head-on.

The Unchangeable Fact: A Fixed Supply Cap

The Foundation's primary message is unequivocal: the total supply of XRP is and always has been fixed at 100 billion tokens since the ledger's inception. No transaction on the network, including the activity related to the patched issue, can create additional XRP beyond this hard cap. This is a fundamental design pillar of the XRP Ledger.

Understanding the Bug and the Fix

The addressed vulnerability was a complex path that required hundreds of deliberately crafted operations to trigger. Normal payments and transfers were never at risk. It was discovered and responsibly disclosed by security researchers using advanced methodologies.

The remediation followed a careful, phased approach to prioritize network safety:

  • Coordinated Deployment: The fix was initially distributed to default validator nodes through social consensus.
  • Public Release: Following this, public binaries were released to the wider community.
  • Protocol Formalization: The update subsequently underwent the standard amendment voting process, securing over 80% support for two weeks to become a required version.

Transparent and Verifiable Supply Data

All ledger data is transparent. Current public ledger information shows the circulating supply is approximately 99.986 billion XRP. The figure is slightly below the 100 billion cap due to the small amount of XRP destroyed with each transaction fee, imparting a mildly deflationary characteristic. Both the community and the Foundation continuously monitor this supply, with no anomalies detected.

Moving Forward: Strengthening Security Posture

In response to this event, the XRP Ledger Foundation announced plans to enhance its security framework further. This includes expanding formal verification efforts, integrating more sophisticated adversarial testing, and bolstering its bug bounty program to proactively safeguard the ledger's integrity.