ZachXBT Questions Low XRP Ledger Security Bounty: Only $250,000 Paid to Reporter of Unlimited XRP Deep Tide TechFlow reported on October 12th that blockchain detective ZachXBT publicly questioned the XRP Ledger Foundation's handling of recent security vulnerabilities and its bounty mechanism. ZachXBT stated that for a critical vulnerability that could lead to the unlimited issuance of XRP, the official organization with billions of dollars in reserves only paid a $250,000 bounty to the responsible white-hat hacker who reported the vulnerability. He believes that such a low reward mechanism is unlikely to incentivize security personnel and may instead encourage future attackers to directly exploit high-risk vulnerabilities for hundreds of millions of dollars in profit. He also stated that such practices reduce the industry's trust in XRP Ledger and Ripple. Previous reports indicated that the XRP Ledger Foundation stated that the recent security vulnerability has been fixed and no new XRP has been issued. https://www.techflowpost.com/zh-CN/newsletter/139640
original
ZachXBT 质疑 XRP Ledger 安全赏金过低：仅向无限增发漏洞报告者支付 25 万美元 深潮 TechFlow 消息，10 月 12 日，链上侦探 ZachXBT 公开发文，对 XRP Ledger Foundation 针对近期安全漏洞的处理及赏金机制提出质疑。 ZachXBT 表示，针对可导致无限增发 XRP 的严重漏洞，拥有数十亿美元储备金的官方机构仅向负责任报告该漏洞的白帽黑客支付了 25 万美元的赏金。他认为过低的奖励机制难以激励安全人员，反而可能促使未来的攻击者直接利用高危漏洞谋取数亿美元的暴利，并直言此类做法降低了行业对 XRP Ledger及 Ripple 的信任度。 此前消息，XRP Ledger 基金会：近期安全漏洞已被修复，未增发任何 XRP。 https://www.techflowpost.com/zh-CN/newsletter/139640