Ripple has joined forces with Web3 security firm Immunefi to launch a global cybersecurity challenge aimed at safeguarding the upcoming XRP Ledger (XRPL) Lending Protocol.
The initiative, dubbed “Attackathon,” introduces a $200,000 prize pool for white-hat hackers and blockchain security experts who help identify potential vulnerabilities before the protocol goes live.
The XRPL Lending Protocol represents a key step in Ripple’s expanding decentralized finance roadmap. Expected to go to a validator vote later this year, the protocol will introduce native lending capabilities to the XRP Ledger – including pooled lending and underwritten credit – allowing institutions and developers to automate the lending process from issuance to repayment. The goal is to create a secure, transparent infrastructure that connects borrowers to global liquidity while generating yield for lenders on dormant assets.
Building a Secure Foundation for Institutional DeFi
Immunefi, which currently protects over $180 billion in user funds across the Web3 ecosystem, will lead the security testing through its Attackathon framework. The event combines education and competition, enabling top-tier security researchers worldwide to rigorously test the XRPL Lending Protocol’s resilience.
“The partnership with RippleX gives us the opportunity to apply our proven Attackathon model to one of the industry’s most established blockchain ecosystems,” said Immunefi founder and CEO Mitchell Amador. “By leveraging the collective expertise of our security researchers, we’re ensuring that XRPL’s DeFi expansion is built on a foundation of trust and protection.”
RippleX’s Head of Product, Jasmine Cooper, emphasized the importance of preemptive testing, noting that lending introduces new layers of complexity to any blockchain network. “XRPL was built with financial use cases in mind. Before the Lending Protocol officially launches, it’s critical to make sure it’s secure and resilient. Immunefi’s experience will help us do just that,” she said.
How the Attackathon Works
The Attackathon officially begins on October 13, 2025, starting with an educational phase known as the Attackathon Academy, where participants will be trained on XRPL’s architecture and lending protocol mechanics. The active bug-hunting phase kicks off on October 27 and will run through November 29.
Researchers who uncover and responsibly disclose vulnerabilities will share in a $200,000 reward pool, with a public leaderboard tracking performance throughout the competition. Immunefi and Ripple plan to close the event with a detailed recap highlighting key findings, lessons learned, and recognized contributors.
A live AMA session featuring Immunefi’s security leads and XRPL Foundation developers will also be hosted on X (formerly Twitter), offering real-time insights into the testing process and upcoming phases of XRPL’s DeFi evolution.
Reinforcing Confidence in XRPL’s DeFi Future
Originally launched in 2012, the XRP Ledger is known for its speed, low transaction costs, and proven stability. As the network transitions deeper into institutional-grade DeFi, initiatives like the Attackathon are designed to ensure it remains among the most secure blockchains in the sector.
Immunefi, which has helped prevent more than $25 billion in potential exploits across over 650 protocols, is widely regarded as a leading defender of decentralized ecosystems. Its collaboration with Ripple highlights a growing industry trend toward proactive, community-driven security – a necessity as DeFi infrastructure becomes increasingly sophisticated.
