Overview
- The XRPL Attackathon Academy is live to onboard researchers with devnet guides, test environments and access to Ripple engineers, with active testing scheduled for October 27 to November 29, 2025.
- Immunefi will handle report triage with KYC requirements, and bounties will be paid to eligible participants in RLUSD.
- The reward pool pays out the full $200,000 if at least one valid critical bug is found, with a $30,000 fallback for valid insights if none are discovered.
- Focus areas include vulnerabilities that could compromise fund security or vault solvency and bugs in interest accrual, liquidation logic and administrative records.
- The proposed lending protocol introduces native pooled lending and fixed-term uncollateralized loans without smart contracts, with a validator vote expected before year-end to determine inclusion on XRPL.