XRP Ledger Lending Protocol passes Halborn re-audit, no crucial vulnerabilities discovered

• The XRP Ledger lending protocol handed Halborn’s re-audit and no main flaws have been detected.
• The protocol’s most extreme vault asset restrict points have been mounted previous to deployment and audit.
• As XRPL approaches the launch of native lending capabilities, the most recent evaluations reinforce confidence.

The XRP Ledger’s upcoming lending protocol has handed an entire re-audit by cybersecurity agency Halborn. The ultimate overview examined main code adjustments made for the reason that final audit and located no crucial or high-severity vulnerabilities.

Commissioned by Ripple, the re-audit examined updates from December 2025 to January 2026. Mr. Halborn reviewed the protocol’s safety, transaction logic, state consistency, entry management, and compliance with the XLS-0066d specification.

In response to the report, Halborn famous:

• 0 Essential vulnerabilities
• 0 Excessive severity vulnerabilities
• 1 Reasonable severity situation
• 2 Minor points
• 2 Data survey outcomes

This consequence implies that probably the most critical safety points are already resolved earlier than deployment. To guage the protocol, Halborn mixed code diff evaluation, guide code overview, specification validation, and automatic safety testing.

Additionally resolved situation with medium severity Vault restrictions.

An vital discovery was the potential of bypassing the vault’s Belongings Most restrict. Mr. Halborn found that the calculation of mortgage rates of interest might trigger the secure’s complete property to exceed the set restrict. This was doable as a result of the LoanSet transaction lacked the validation checks that already existed for deposits.

In proof-of-concept testing, a secure with an asset restrict of 100,000 items might exceed that threshold by amassed mortgage curiosity. This can be a medium severity situation and has been mounted.

Ripple mentioned its builders independently recognized and patched the vulnerability earlier than the audit formally started. Correction accomplished on December 17, 2025.

Much less extreme findings

One of many much less critical findings was what Halborn referred to as a “deteriorating situation.” In sure configurations, setting the liquidation protection ratio beneath 100% may cause issues if a number of loans default. The obtainable protection might fall beneath the required stage and we could also be unable to originate new financing whereas current defaults proceed. This may increasingly trigger components of the protocol to freeze briefly.

Ripple has chosen to not straight patch the difficulty. As a substitute, we accepted the chance, remembering that Lending Protocol V1.1 could be nice. Within the subsequent model, the CoverRateLiquidation parameter will likely be eliminated utterly.

One other much less extreme situation was the creation of LoanBroker accounts in frozen vaults.

Mortgage operations have been already blocked within the frozen vaults, however customers might nonetheless create dealer accounts. This may unnecessarily lock up your reserve funds. Ripple has since mounted the difficulty.

Core safety and protocol integrity

Our overview of Halborn focuses on a number of key areas, together with:

• Transaction validation
• Consistency of state transitions
• Mortgage lifecycle administration
• Vault and dealer operations
• Implementing permissions
• Freezing therapy
• Edge case habits
• Consistency from specification to code

The corporate additionally reviewed node stability dangers, cost processing limitations, mathematical calculations, and corrective gating mechanisms throughout the XRPL codebase.

The ultimate report concludes that no vital or high-severity vulnerabilities stay within the audited lending protocols. The remaining findings are resolved, acknowledged, or accepted as design trade-offs previous to future upgrades.

Lending protocols transfer nearer to XRPL launch

The profitable re-audit marks a brand new step for the XRP Ledger’s DeFi ecosystem. As Ripple expands its native lending infrastructure on XRPL, this overview confirms that the protocol has reached a extra mature stage of improvement. Beforehand recognized weaknesses have been resolved and Halborn’s evaluation discovered no vital safety threats.

These findings will enhance the boldness of builders, establishments, and different individuals as XRPL’s DeFi capabilities enhance.

Associated: XRP Ledger prepares for subsequent section with 5 main upgrades