XRPL Lending Protocol Hackathon: What 45 Builders Shipped in a Weekend
On September 12 and 13, DeVinci Blockchain and Ripple hosted the XRPL Lending Protocol Hackathon at ESILV Paris. The 45 selected builders spent 36 hours exploring and building on top of the Lending Protocol (XLS-66) and Single Asset Vault (XLS-65), the native primitives designed to bring modular lending and liquidity management to the XRP Ledger.
Applicants underwent a selective screening process led by DeVinci Blockchain, bringing together students from top French and Swiss engineering schools and developers from the broader XRPL community. The hackathon featured two tracks. Track 1 focused on open-ended vaults (V1.0), where deposits and withdrawals occur dynamically and capital recycles into new loans continuously. Track 2 focused on closed-ended vaults (V1.1), a three-phase structure (Subscription, Investment, Redemption) tailored for fixed-term credit products like bonds and institutional credit funds.
Both tracks ran on a custom hackathon Devnet with rippled 3.4.0-rc1 and all lending amendments enabled. The prize pool was $5,000 in cash, and the top two teams also won travel grants and passes to Swell.
Beyond building functional applications, every participating team was asked to submit structured developer feedback covering client SDK usability, protocol UX friction, missing primitives, and documentation gaps. That feedback is already being processed to improve the SDKs, tooling, and docs ahead of mainnet activation.
Meet the winners
1st place and overall winner: Orma
Team BuzzBallz: Alexandre Lemière, Andrea Gonzalez
Orma is a third-party solvency reader, credit rating engine, and capital gate for XLS-66 lending vaults. The team identified a critical asymmetry in the protocol: the entity that decides when a vault recognizes a loss also dictates the order in which losses are realized, directly impacting how much investor capital is consumed.
Orma reads vault solvency directly from ledger state rather than relying on transaction metadata diffs (which can yield misleading results), publishes risk scores as a native XLS-47 Price Oracle, and enforces deposit gating using XLS-70 Credentials. They ran four live Devnet facilities, submitted 40 structured developer findings (7 P0, 19 P1, 14 P2), and contributed an upstream fix to the official lending tutorial.
The team won $1,700 in cash, plus a travel grant and a pass to Swell.
GitHub: BuzzBallz/orma
2nd place: patapim
Sofiane Ben Taleb, Armand Séchon
patapim brings agency securities lending natively to the XRP Ledger, without smart contracts. Holders of a tokenized security who carry the right credential subscribe to a fixed-term, closed-ended vault. A lending agent, who owns the vault and its loan broker, posts first-loss capital in the same security, and a market maker borrows the securities for a fee, against cash collateral held in a token escrow. If the securities are not returned, the agent's cover repays the fund. The team also flagged a gap: the protocol has no way to recall a loan before its term, and its developer report proposes one (tfLoanCall).
The team won $1,000 in cash, plus a travel grant and a pass to Swell.
GitHub: gamween/patapim
3rd place: BSA Capital
Stan Stelcher, Youssef Jeddi of Blockchain Student Association, EPFL
BSA Capital built a compliant marketplace for closed-ended lending funds, with a secondary market that lets an investor sell a position the vault itself keeps locked until redemption. When an investor deposits into a closed-ended vault, their capital is locked until the redemption window opens. BSA Capital provides a way to trade those shares during the investment phase, giving investors a liquidity option without disrupting the underlying vault or its loans. The project used XLS-70 Credentials and XLS-80 Permissioned Domains alongside the core lending primitives.
GitHub: youssef-jeddi/BSA-Capital
Broader context and testing road
The hackathon was one part of a broader testing process the Lending Protocol has gone through before mainnet. That process includes a Halborn code audit, a $200K Immunefi Attackathon (35,000+ lines of C++ reviewed by security researchers), a red team exercise, 257 independent community test cases with a 100% pass rate, and a Halborn re-audit incorporating all findings. You can read the full security timeline.
What the hackathon specifically evaluated was developer experience: whether engineers and developers seeing these specifications for the first time could pick them up on a Saturday morning and ship a functional application by Sunday. The structured feedback filed by these teams highlights high-priority DevEx enhancement opportunities and is already directly shaping updates to the SDK, XRPL Explorer, and documentation.
Both open-ended and closed-ended vault amendments (XLS-65 V1.0 and V1.1, alongside XLS-66) are now up for validator voting on the XRP Ledger. Several hackathon projects are actively continuing development toward mainnet deployment once the amendments activate. The next XRPL Hackathon takes place October 24 to 25 in New York, right before Swell 2026, featuring Lending and Borrowing as a dedicated track.
Organised in collaboration with DeVinci Blockchain and Ripple.