The XRP Ledger Foundation has confirmed it patched a critical vulnerability in a yet-to-be-activated amendment to the XRP Ledger, preventing what could have been a major exploit.

The flaw, discovered on Feb. 19 by security engineer Pranamya Keshkamat and Cantina’s AI security bot, involved signature-validation logic. According to the foundation, the bug could have allowed attackers to execute transactions — including draining wallets — without possessing victims’ private keys.

Importantly, the amendment was still in its voting phase and had not been activated on mainnet, meaning no funds were ever at risk. Validators were urged to vote against the proposal, and an emergency update (rippled 3.1.1) was released to block activation entirely.