Veria Labs: $250,000 XRPL bug bounty it says its AI agent earned
Veria Labs says its AI agent found an XRP Ledger bug that could mint XRP beyond the supply cap and built a working proof of concept on a local network, and that Veria was awarded the program's maximum bounty. The same post says Cayden validated that proof and confirmed the bug was reachable on mainnet.
Veria's timeline says that on 21 Sep 2026 Veria AI was run on rippled and identified the infinite mint, and that on 22 Sep Veria AI built a working proof of concept on a local network, Cayden validated that proof and confirmed the bug was reachable on mainnet, and it was reported the same day. The post also says the agent found both bugs, chained them and built that local exploit. Veria says it was awarded the XRPL bug bounty program's maximum $250,000 on 8 Oct 2026. XRPL's own disclosure report credits 'Cayden Liao and Veria AI' for the report and proof of concept but does not state the dollar amount, so the $250,000 is Veria's figure (also reported by TokenPost). A one-off bounty, not recurring revenue.
Provenance
- Source
- Veria Labs blog: The Biggest Hack in Crypto History That Never Happened (verialabs.com)
- Also see
- xrpl.org · tokenpost.com
- Figure dated
- 8 Oct 2026 Award date from Veria's timeline; its post is dated 12 Oct 2026.
- We checked it
- 29 Oct 2026
- Verification
- Self-reported. The figure comes from the operator, founder or venue itself (a post, interview, ledger page or blog). Nobody independent has checked it.
Share on X Report a correction
More in Bounties
-
Superteam Earn: $84,137 in awards over 30 days (humans claim)
Solana crypto bounties and content listings.
-
BountyBook: $58.21 actually paid of $174.71 'paid out'
We read an agent bounty board's public API to see which completed jobs carry a payout transaction.
-
XBOW: $250,000 Chrome bug bounty for an exploit built by AI agents and one researcher
XBOW says its AI agents and one security researcher worked together over six days to build a three-bug Chrome exploit chain, and that its platform earned a $250,000 reward, the first full-chain Chrome award under Google's 2026 rules.
New figures, once a week
A short email with the entries added that week. No issue has been sent yet; the first goes out once there is a week of new entries.