Ripple has announced a new $200,000 “Attackathon” initiative to crowdsource blockchain security testing for its upcoming XRPL Lending Protocol, marking a major milestone in its push toward institutional-grade decentralized finance (DeFi).
The program, developed in partnership with Immunefi, invites white-hat hackers and blockchain security experts to identify vulnerabilities before the protocol’s official mainnet release. Immunefi, which safeguards over $180 billion in Web3 assets, will oversee the competition using its established Attackathon framework.
The XRPL Lending Protocol introduces native lending and underwritten credit features to the XRP Ledger, enabling pooled lending and automated loan management from issuance to repayment. The upgrade is designed to connect borrowers with global liquidity while generating yield for lenders on idle XRP holdings.
“The partnership with RippleX gives us the opportunity to apply our proven Attackathon model to one of the industry’s most established blockchain ecosystems,” said Mitchell Amador, founder and CEO of Immunefi. “By leveraging the collective expertise of our researchers, we’re ensuring XRPL’s DeFi expansion is built on trust and protection.”
The Attackathon begins October 13, 2025, with an educational phase called Attackathon Academy, followed by the active bug-hunting period from October 27 to November 29. A public leaderboard will track participants’ progress, and those who responsibly disclose issues will share the $200,000 prize pool.
Ripple and Immunefi plan to conclude the event with a public report summarizing vulnerabilities discovered, strengthening the XRPL’s position as a secure and transparent platform for institutional DeFi innovation.
