
Ripple has partnered with Immunefi to launch a global cybersecurity initiative, testing and strengthening the upcoming XRPL Lending Protocol. The program, called “Attackathon,” offers $200,000 in rewards for security researchers who help uncover vulnerabilities before the protocol goes live.
XRPL Lending Moves Towards Institutional DeFi
The Lending Protocol will bring native lending features to the XRP Ledger, including pooled lending, automated repayments, and underwritten credit. Ripple aims to make borrowing and lending on XRPL secure, transparent, and efficient, while providing opportunities for dormant assets to generate yield.
How Attackathon Will Test Security
Immunefi, responsible for safeguarding over $180 billion in Web3 funds, will run the program using its Attackathon framework. Participants will combine learning and real-world testing to evaluate XRPL’s protocol under stress.
“This challenge leverages the best security minds worldwide to ensure XRPL’s lending expansion is resilient and reliable,” said Mitchell Amador, CEO of Immunefi. Jasmine Cooper, Head of Product at RippleX, added:
“Introducing lending brings complexity. Pre-launch testing is crucial to maintain XRPL’s track record of safety and performance.”
Challenge Timeline
The initiative began on October 13 with an educational phase. It was followed by live bug-hunting from October 27 to November 29. Researchers reporting valid issues will compete for a share of the prize pool, and a public leaderboard will track progress. Ripple and Immunefi will publish a recap highlighting discoveries and lessons learned. Additionally, a live AMA session with XRPL developers and Immunefi experts will provide real-time updates.
Related read: XRP Price Prediction.
Strengthening Trust in XRPL DeFi
Since 2012, XRP Ledger has been known for speed, low fees, and stability. The Attackathon demonstrates Ripple’s focus on proactive security as XRPL expands into institutional-grade DeFi.
Immunefi’s record of safeguarding $25 billion+ across 650+ protocols reflects the growing industry focus on community-driven security to prevent exploits before they happen.

