Schwartz says a state can disrupt XRPL but cannot mute it
XRP Ledger architect David Schwartz (
@JoelKatz) was asked on X whether a hostile regime could weaponize or shut down the network by going after its validators. His answer: a state actor could cause temporary disruption, but not lasting control, because anything they exploit is software, and software gets changed.
The structure is the reason.
@Ripple runs under 20% of XRPL validators, so taking out Ripple's own machines leaves consensus standing. An attack only bites if it scares people off running validators entirely, and operators can be replaced, with replacements able to run anonymously over Tor or I2P.
Schwartz floated a longer-term defense too: a two-layer consensus where a replaceable inner layer handles daily activity and a lightweight, hidden outer layer steps in only to swap compromised validators. Attack the inner set and it regenerates. Find the outer set and there is little there to seize.