- hey @kaereste, how was @EFDevcon Mumbai? - interesting you should ask - I’ve been trying to wrap my head around the past week. I’ll be honest: when I first heard about the location, I wasn’t fully convinced. On the one hand, I’d heard India could be tough. On the other, it’s an enormous country with a huge population, a long list of globally successful CEOs, and rapid economic growth. I wanted to experience it firsthand! And with the current crypto market and sentiment, Mumbai seemed like a risky choice for Devcon. But overall, imo, it worked out pretty well. Yes, the event was smaller. Yes, it’s a shame that many popular projects didn’t have much of a presence. Yes, the timing could have been better for onboarding more locals into crypto. But at the same time, it was great to see so many new faces - so many people who clearly didn’t yet know what this whole Ethereum thing was about, but approached it with curiosity. And hey, we’ve all gone swag-hunting at some point. Judging anyone for that is lame imo. I hope the Ethereum seeds planted in the minds of some of those ambitious students will grow into fruitful CROPS in the future. And imo the whole experience was very humbling. A lot of us came to India thinking we were bringing the fire of a new financial future with us, only to learn that this future is already there - and that we’re the ones who should be learning, not the other way around. So yeah, I think it was good. And I think that in a few years, it might prove to have been perfectly timed - a real turning point for Ethereum’s future. But now I’m super excited for Devcon Lisbon and all the events across Europe leading up to it! Next year is gonna be legendary - we’re gonna make it so!

Mumbai I’m in you Frens let’s connect before @EFDevcon (shoutout to the king @0xThiru :) ) I’m super excited to see what this week brings us! If you’re in town and want to catch up feel free to DM me. See you all at the events!

ทุกคนคะ ชั้นมาลาฝกววสหสฟบกายหนห 🥺😭 THE WORLD BETWEEN LINGORM D1 #LingOrmBetweenUsConcertD1# #หลิงออม# #LingOrm#

Security remains our top priority for preserving trust in the XRP Ledger (XRPL). Sharing a few thoughts following yesterday's disclosure of the critical payments engine vulnerability reported by Veria AI. First, this was a serious vulnerability, and we don't take that lightly. The bug had existed in the codebase for over a decade and could have allowed XRP to be created beyond its fixed supply. Fortunately, it was discovered through our bug bounty program before it could ever be exploited. Second, our response was fast and coordinated. The team developed and thoroughly tested a fix, worked closely with validators to rapidly upgrade the network, and secured the ledger before public disclosure. I'm proud of how everyone came together to address the vulnerability and protect the XRPL network. But there's a much bigger lesson here. AI is fundamentally changing how quickly vulnerabilities can be discovered. We have to move even faster than before, especially with a codebase that's been around for over a decade. This means we're doubling down in a few important areas: * Proactive security: Strengthening our bug bounty programs, expanding AI-assisted vulnerability discovery/adversarial testing, and continuously improving testing across releases. This discovery reinforces why these investments matter. * Addressing legacy tech debt: Working with our internal red team, external security researchers, and the XRPL Foundation to revisit longstanding assumptions in critical areas like payments engine, consensus, and P2P networking, guided by an updated threat model. * Accelerating formal verification of critical areas: Continuing our work with CommonPrefix and the XRPL Foundation to apply formal verification to critical parts of the protocol, with the goal of uncovering deeper issues that other approaches could easily miss. We will build on the learnings from formal verification of the Lending Protocol and Single Asset Vault. * Systemic hardening: Moving beyond individual bug fixes to identifying latent risks in older parts of the XRPL codebase and eliminating entire classes of vulnerabilities. Our goal isn't simply to find more bugs. It's to systematically address the underlying risks and make the XRPL harder to exploit. As the XRPL's role in global financial infrastructure grows, so does our responsibility to protect it. Security is never finished. We'll keep investing and improving alongside the broader XRPL community. Full disclosure for the 3.4.1 release: