TLDR
- Ripple has partnered with Immunefi to launch a $200,000 bug bounty event called Attackathon.
- The event will test the upcoming XRPL Lending Protocol before its official launch.
- The bug hunting competition will run from October 27 to November 29.
- Ripple will provide full technical support through an educational program called Attackathon Academy.
- Researchers must submit reproducible bugs with working proof-of-concepts to qualify for rewards.
Ripple and Immunefi have announced a $200,000 security competition for the upcoming XRP Ledger (XRPL) Lending Protocol. The initiative, called “Attackathon,” will run from October 27 to November 29. The event aims to identify critical flaws before the protocol goes live.
White-Hat Hackers Invited to Test XRPL Lending Protocol
Ripple partnered with Immunefi to invite ethical hackers to examine the new lending infrastructure on XRPL. The project will offer fixed-term, uncollateralized loans on the XRP Ledger. The protocol, governed under XLS-66, will assess borrower risk off-chain.
The partners structured the event to include a $200,000 reward pool for valid, reproducible exploits. Immunefi will manage the bug bounty process and verify submissions. Ripple will also offer technical support through the “Attackathon Academy.”
The academy will run from October 13 to October 27 to help participants understand the architecture of XRPL. It will include documentation, walkthroughs, and a Devnet testing environment. The bug-hunting phase will start after the learning period ends.
Ripple Offers Bounty for Protocol Bugs
Ripple and Immunefi confirmed the full reward unlocks only if a valid exploit is discovered. If no major exploit occurs, $30,000 will be distributed to participants who make meaningful contributions. Immunefi will verify and rank all submitted findings.
The focus will be on vulnerabilities that may impact the safety of funds and the solvency of protocols. Areas under scrutiny include vault logic, liquidation mechanisms, interest calculations, and access controls. Ripple emphasized that bugs must include working proof-of-concepts.
The XRPL Lending Protocol does not utilize smart contracts or on-chain collateral, diverging from the standard DeFi model. Ripple stated that the protocol aims to facilitate institutional adoption through off-chain credit assessment and ledger-based settlements. Immunefi will ensure the process remains secure and transparent.
Protocol Integrates Multiple Ledger Standards
Ripple’s new lending system integrates several XRPL standards for full functionality. These include XLS-65, XLS-33, XLS-70, and XLS-80. Each plays a role in vaults, token management, credential handling, and domain permissions.
Immunefi and Ripple confirmed that these modules are also in scope for the security challenge. Participants will test interactions between these layers to find hidden risks. Ripple aims to enhance protocol security prior to its release.
