Canadian Bitcoin developer Peter Todd, who was featured as the most likely Satoshi Nakamoto in an HBO documentary, has reignited the debate about Ripple (XRP).
Peter Todd criticized Ripple after a vulnerability was discovered in a JavaScript library used for the XRP Ledger.
The vulnerability, initially flagged by Aikido Security and acknowledged by Ripple CTO David Schwartz a few days ago, came to the fore.
This comes after malicious code was injected into the official node package manager (NPM) for XRPL; a move that could allow attackers to steal users’ private keys and empty their wallets.
Following the latest acknowledged vulnerability, Todd recalled that he had warned of such risks a decade ago.
At the time, Todd published an article criticizing Ripple for not verifying its code with cryptographic PGP signatures. Without this verification, attackers could inject malicious code and distribute fake software, Todd argued. This is exactly the situation that is currently unfolding.
“10 years after I pointed out the risk of a Ripple backdoor due to Ripple not signing its software with PGP or providing any other way to securely obtain it… there is a Ripple backdoor due to the npm breach.”
The debate reignited by Peter Todd has served as a reminder of the importance of software supply chain security, especially in the crypto space where millions of dollars and user trust are at stake.
*This is not investment advice.
