XRPN took shareholder vote without knowledge of XRP inflation bug
XRPN shareholder vote approved while XRP inflation bug was hidden
Evernorth Holdings (ticker XRPN), a SPAC formed by Ripple and Arrington Capital to take an XRP treasury company public, held its shareholder redemption window before September 28, 2026. During that time, an undisclosed bug in the XRP Ledger could have allowed hackers to mint trillions of new XRP tokens. Shareholders voted on September 30 and the merger closed on October 9 without knowing about the vulnerability.
Key numbers
- Bug reported by researcher Cayden Liao and Veria AI: September 22, 2026
- Ripple released emergency patch xrpld 3.4.1: September 25, 2026
- Shareholder redemption deadline: September 28, 2026
- XRPN vote passed: September 30, 2026
- Merger closed: October 9, 2026
- Official disclosure of the bug's impact: October 9, 2026
- Claimed XRP supply ceiling: 100 billion tokens (Evernorth proxy filing)
- Potential inflation: Trillions of XRP tokens (reported by bug report)
What the official bug report says
The XRP Ledger Foundation’s official vulnerability disclosure report released on October 9 confirms that the September 25 patch fixed a catastrophic inflation bug. The bug, present since at least 2015, could have let a single transaction create spendable XRP far beyond the promised 100 billion token limit.
Confirmed facts
- The bug was privately reported to Ripple on September 22, 2026.
- Ripple issued a closed‑source patch on September 25, 2026, labeled "integer‑arithmetic hardening".
- Shareholders had a redemption window ending September 28, 2026.
- XRPN shareholders voted on September 30, 2026, and the merger closed on October 9, 2026.
- The bug's existence was only publicly disclosed on October 9, 2026.
Why this matters for crypto investors
Evernorth's business model depends on XRP's limited supply. The undisclosed inflation bug threatened that premise, showing how a single code flaw could undermine a token's core value proposition. Investors who approved the SPAC merger were unaware of the risk, highlighting the need for thorough security reviews before public listings.
Sources
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.