Cyber Capital founder Justin Bons has issued sharp criticism against XRP, casting doubt on its decentralization and the mechanisms governing its validator software.
In a post on X, Bons alleged that XRP had been running closed-source code for a fortnight and warned that the code was set to become compulsory, with any non-compliant validators facing removal from the network. He linked this situation to a permissioned node list, pointing out that validators are bound by the demands of the list administrators.
Furthermore, Bons dismissed the argument that operating on closed-source code was acceptable simply for the sake of a vital security patch. Drawing a contrast with networks like Bitcoin, Ethereum, and Solana, he noted that those blockchains have traditionally guided validators to adopt new open-source binaries without exposing the specifics of any underlying security flaw.
Bons explained that developers can safeguard users by keeping vulnerability specifics under wraps while still permitting validators to review the software they are expected to execute.
In his view, this method offers a safer equilibrium because closed-source binaries introduce extra vulnerabilities. Bons cautioned that malicious code could potentially compromise funds or crash an entire network, highlighting the ongoing necessity of open-source software for truly decentralized blockchains.
Selling XRP to retail as "decentralized" is straight-up fraud!
XRP has been running closed-source code for the last two weeks
Tomorrow, this code becomes mandatory & anyone who disagrees will get kicked off the chain!
A permissioned node list means validators must obey: … pic.twitter.com/3nIcRiid8S
— Justin Bons (@Justin_Bons) October 8, 2026
Bons Challenges XRP’s Consensus Model
Bons proceeded to target the consensus framework of XRP, asserting that these recent events reveal a fundamental flaw in the architecture of the network.
He characterized XRP’s mechanism as a Proof of Authority (PoA) model, arguing that authority stems from what he termed “kingmakers.” He singled out Ripple and the XRP Ledger Foundation as the parties behind the publication of the two permissioned validator registries.
Bons maintained that this framework proves the Ripple consensus mechanism relies on permissioned validator lists instead of operating as a fully decentralized ecosystem. He drew a parallel between XRP and Canton, noting structural similarities while praising Canton for maintaining greater transparency regarding its network architecture.
Bons Accuses Ripple of Misrepresenting XRP
The core of Bons’ grievance lies in what he perceives as Ripple’s narrative regarding XRP’s level of decentralization. He labeled the company’s statements as deceptive and suggested the matter crosses the line into investment fraud.
Additionally, he asserted that independent cryptocurrency researchers outside of the XRP ecosystem largely dismiss the network’s decentralization assertions. According to Bons, XRP ranks among the most centralized blockchain projects in existence, labeling the network’s decentralization marketing as a “bad joke.”
Bons Raises Broader Concerns Over XRP
Wrapping up his remarks, Bons pointed to the closed-source software controversy as merely the most recent instance of what he termed ongoing misrepresentation regarding XRP. He also reiterated his grievances concerning the token’s initial supply distribution, claiming that Ripple allocated the entire supply to itself and has continuously offloaded XRP to retail investors across extended periods.
He cautioned that concentrated control carries the risk of eventual exploitation before encouraging users to explore alternative blockchains that he regards as scalable, economically sound, and decentralized.