Thorchain lost $10.8 million on May 15 to a cross-chain attack that drained funds across four networks. Drift Protocol and KelpDAO together bled more than $600 million through April. The common thread linking these exploits and billions more since 2021 is a mechanism that simply does not exist on the XRP Ledger.
A draft amendment filed to the XRPL standards repository this week spelled it out in a single sentence buried in the Security Considerations section: “Flash loan attacks are structurally impossible. XRPL transactions are atomic without composable intra-transaction calls.”
That dry technical note carries significant weight as institutional capital circles tokenized real-world assets on the network and a proposed AMM upgrade could finally make XRPL’s DeFi liquidity competitive with Ethereum. The question is whether structural exploit resistance is a genuine competitive advantage or just a curiosity institutions will ignore when chasing deeper pools elsewhere.
The Borrow-Manipulate-Repay Sequence That XRPL Blocks
Flash loans are a smart contract feature that lets a trader borrow millions of dollars with zero collateral, on the condition that the loan is repaid before the transaction settles. When the transaction completes, either the funds are back in the lending pool or the entire operation reverts as if it never happened. The borrower risks nothing but gas fees.
The legitimate use cases are genuinely useful. Arbitrage traders use flash loans to clear price differences between exchanges in a single atomic action. Liquidation bots use them to keep over-collateralized lending positions solvent without tying up capital. Sophisticated DeFi users swap collateral positions that would otherwise require hours of waiting.
The attack pattern is the same mechanic pointed in a harmful direction. A borrower takes out the loan, uses the borrowed capital to manipulate an oracle or drain a poorly designed pool, captures the profits, and repays the loan. Three or more nested operations, all inside one transaction envelope.
XRPL’s transaction model does not permit this. Each transaction on the XRP Ledger either fully succeeds or fully fails (atomic execution, same as Ethereum). But unlike Ethereum, an XRPL transaction cannot call into another contract during its execution. There is no composable intra-transaction call stack. The borrow-manipulate-repay sequence cannot be constructed because the pieces cannot be nested together.
This is not a bug fix or a recent security patch. It is a fundamental architectural decision baked into how the XRP Ledger was designed from the beginning. For most of XRPL’s history, the tradeoff did not matter because the chain’s DeFi footprint was small enough that nobody was targeting it with sophisticated exploits anyway. That calculus is changing.
$600 Million in Two Months: The 2026 Flash Loan Toll
The two biggest DeFi exploits of the past two months both relied on mechanisms that cannot function on XRPL.
Thorchain’s $10.8 million loss on May 15 was a cross-chain attack spanning Bitcoin, Ethereum, BSC, and Base. The attacker exploited price manipulation across multiple networks in a coordinated sequence. Drift Protocol, a Solana-based decentralized perpetual exchange, and KelpDAO, a liquid restaking protocol on Ethereum, together accounted for more than $600 million in losses through April alone.
The Chainalysis figure of $2.8 billion lost from cross-chain bridges since 2021 does not even capture the full picture, as it focuses specifically on bridge exploits rather than the broader category of flash loan attacks against lending protocols, AMMs, and yield aggregators.
These are not fringe protocols being targeted. Thorchain is a major cross-chain liquidity network. Drift was a leading Solana perpetuals venue. KelpDAO operated in the liquid restaking sector that attracted billions after Ethereum’s Shanghai upgrade enabled staking withdrawals. Flash loan attacks have become a structural risk across DeFi’s most active protocols, and the economic incentives guarantee the attacks will continue as long as the mechanism exists.
The SpaceX pre-IPO contract crash on Hyperliquid that liquidated 405 traders in a 30-minute window was a different exploit class (a single massive sell order rather than a flash loan), but it illustrates how quickly DeFi markets can unwind when protocol design does not account for adversarial actors with large capital.
The Tradeoff: What XRPL Gives Up
Blocking flash loans is not free. The same mechanic that enables attacks also powers legitimate DeFi infrastructure that Ethereum users take for granted.
Aave, dYdX, and other major protocols offer flash loans as a product. The fees generate revenue for liquidity providers. Arbitrage traders use flash loans to clear price differences between exchanges in a single atomic action, which improves price efficiency across the ecosystem. Liquidation bots use them to keep lending markets solvent by quickly repaying underwater positions before bad debt accumulates.
Sophisticated DeFi users use flash loans for collateral swaps that would otherwise require capital tied up for hours. A user who wants to move from ETH collateral to stETH collateral on a lending protocol can do it in one transaction with a flash loan, rather than unwinding the position, waiting for funds to settle, and rebuilding.
XRPL gives up all of that in exchange for closing the attack class entirely. The network trades capital efficiency tools for structural security. Whether that tradeoff is worth it depends on who is deploying capital and what risks they are willing to accept.
The draft AMM amendment filed this week attempts to address part of the efficiency gap. The proposal introduces concentrated liquidity (similar to Uniswap V3’s range-bound positions) and StableSwap-style pools (similar to Curve’s design optimized for assets that should trade near parity) for XRPL’s native automated market maker. These features would make XRPL’s DeFi capital more efficient without reintroducing the composable transaction calls that enable flash loan attacks.
Tokenized Assets at $3 Billion: Why This Matters Now
Tokenized real-world assets on the XRP Ledger have crossed $3 billion in total value. The Ripple-JPMorgan-Mastercard-Ondo Finance pilot last month processed a tokenized U.S. Treasury redemption in under five seconds, demonstrating the network’s capability for institutional-grade settlement.
As Ripple tests AI on XRP Ledger infrastructure and institutional adoption accelerates, the question of exploit resistance becomes more than academic. A pension fund or asset manager evaluating where to custody tokenized Treasuries cares deeply about whether the underlying network has a history of hundred-million-dollar exploits.
Ethereum’s DeFi ecosystem is deeper. The liquidity is better. The tooling is more mature. The developer community is larger. But Ethereum also carries the structural risk of flash loan attacks that have cost protocols billions, and no amount of audits or insurance can fully eliminate the risk when the attack vector is baked into how the system works.
XRPL’s institutional pitch is that certain exploit classes are not “unlikely” or “mitigated” but literally impossible given the transaction model. For capital that prioritizes security over capital efficiency, that is a meaningful differentiator.
The Ripple $750M buyback at a $50 billion valuation came shortly after Goldman Sachs loaded XRP into ETF products, suggesting institutional appetite for the network is real and growing. Whether that appetite extends to XRPL’s DeFi layer depends on whether the AMM amendment passes and whether the resulting liquidity can compete at institutional scale.
The Concentrated Liquidity Bet
The draft amendment’s concentrated liquidity feature addresses the capital efficiency problem directly. Traditional AMMs spread liquidity across the entire price curve, which means most of the capital sits unused at price points far from the current market. Concentrated liquidity lets LPs focus their capital within specific price ranges, generating more fees per dollar deployed.
StableSwap curves optimize for assets that trade near parity (stablecoins, wrapped assets, liquid staking derivatives). Rather than the standard x*y=k bonding curve, StableSwap uses a flatter curve that reduces slippage for trades between correlated assets. This is the design that made Curve Finance dominant for stablecoin swaps on Ethereum.
Bringing both features to XRPL would close much of the capital efficiency gap that has kept serious DeFi activity on other chains. The derivatives market has grown substantially on networks with sophisticated AMM infrastructure, and XRPL has largely missed that growth.
The amendment’s path through XRPL governance is not guaranteed. Validators must reach consensus to enable new features, and concentrated liquidity adds complexity to the network’s transaction processing. But the Security Considerations section’s note about flash loan impossibility suggests the developers are explicitly positioning the upgrade as a way to expand DeFi capabilities without importing Ethereum’s exploit risks.
Liquidity vs. Security: An Unresolved Question
The honest answer is that nobody knows whether structural exploit resistance will matter to institutions or whether they will simply follow the liquidity.
Ethereum’s DeFi ecosystem has survived flash loan attacks that drained hundreds of millions and kept growing. Protocols add insurance, improve audits, implement time delays, and accept some level of exploit risk as the cost of capital efficiency. The market has not abandoned Ethereum DeFi despite years of high-profile losses.
XRPL’s pitch requires institutions to value security over convenience, which is not obviously how capital allocation works in practice. A fund manager deploying $100 million into tokenized Treasuries might prefer the network where redemption happens in five seconds and flash loans are impossible. Or they might prefer the network where secondary market liquidity is ten times deeper and they can exit positions without moving the market.
The $3 billion in tokenized RWAs on XRPL is meaningful but still small compared to Ethereum’s DeFi TVL. The market dynamics favor incumbents with established liquidity, and XRPL is trying to attract capital with a security argument rather than competing on the same liquidity metrics.
If the AMM amendment passes and XRPL’s DeFi liquidity grows toward something institutional capital can deploy at scale, the structural exploit resistance becomes a genuine competitive moat. If the liquidity never materializes, the security advantage is academic.
The Institutional Calculus
The fear and greed index captures retail sentiment, but institutional allocation decisions run on different criteria. Risk officers at pension funds and asset managers evaluate counterparty risk, custodial security, and protocol exploit history. A network where an entire exploit class is architecturally impossible scores well on those evaluations.
The quantum computing threat has prompted similar architectural discussions in the Bitcoin community, with proposals to freeze coins vulnerable to future quantum attacks. The common thread is that blockchain security increasingly depends on design decisions made at the protocol level rather than application-level patches.
XRPL made its decision years ago by not implementing composable transaction calls. The bet is now paying off as DeFi exploit losses mount and institutional capital looks for safer deployment options. Whether the bet pays off fully depends on whether the AMM upgrade can deliver competitive capital efficiency without reopening the attack surface.
The draft amendment is not yet live. Validators will need to evaluate the proposal, and the governance process takes time. But the Security Considerations section’s explicit note about flash loan impossibility suggests Ripple and the XRPL developer community are positioning the upgrade as a direct response to Ethereum’s exploit problem.
Structural exploit resistance is either a meaningful competitive advantage or a footnote that institutions ignore when chasing liquidity. The next twelve months will probably answer which.
Related Reading
- What is Ethereum? Smart contracts explained
- Quantum computing and Bitcoin: what the threat really is
- Security news
- More on XRP Ledger
- More on Flash Loans
