How the Manifest Flood Actually WorkedThe attack hit a gap in how XRPL nodes handled validator manifests. The amount of shared manifest data sent to new peers is limited. Skip that second step and residual manifest data from the flood could still be lurking. Operators need to make sure their systems trust Ripple’s current GPG signing key — the one updated on February 18, 2026. Who needs to upgrade after the XRP Ledger manifest flood attack?