In brief. XRP Ledger - April 2026 is a bug bounty program on Sherlock. 3 assets are listed in scope, 3 of them bounty-eligible. As of Aug 20, 2026. Markdown for agents

NR Unrated

XRP Ledger - April 2026

XRP Ledger - April 2026 Sherlock

3 more reviews needed for a grade

Write a review

Program page audits.sherlock.xyz ↗

Claim this company profile

Work at XRP Ledger - April 2026? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review

Program profile Sherlock, imported

Sherlock published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 8 Nov 2026.

Submissions

Open

Launched

Apr 2026

Scope

3 assets

Asset	Type	Eligibility	Max severity
https://github.com/sherlock-audit/2026-04-xrp-ledger-april-2026	SOURCE CODE	✓ bounty	not set
https://github.com/XRPLF/mpt-crypto	SOURCE CODE	✓ bounty	not set
https://github.com/XRPLF/rippled	SOURCE CODE	✓ bounty	not set

Known vulnerabilities in in-scope packages

1 from OSV.dev

Published vulnerabilities in the packages and repositories this program lists in scope, from the open OSV.dev database. They are already public, so they are context for where the code has broken before, not findings to report.

Advisory	Package	Severity	Published
CVE-2022-29077 A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remote…	github.com/XRPLF/rippled	not set	25 Apr 2022