XRP Ledger Fix for Token-Minting Flaw Due to Activate November 4

The XRP Ledger is set to activate fixCleanup3_4_0 around 14:46 UTC on November 4, closing a flaw that let burn-only permissions create new issued tokens.

AltcoinsCoinHammy Editorial Team
A gold XRP-branded coin held in a hand against a black background

A fix for the XRP Ledger (XRPL) is due to activate at about 14:46 UTC on November 4, provided validator support holds. The amendment, called fixCleanup3_4_0, closes a flaw that could let an account authorized only to burn an issuer's tokens create new ones under certain conditions. It affects tokens issued by third parties on the ledger, stablecoins included, but not XRP's own supply.

What the flaw is

According to XRPL documentation, the delegated PaymentBurn permission is meant only to destroy tokens, but until the fix is live a delegate could mint trust line tokens or MPTs in some circumstances. The documentation advises against delegating the permission until the amendment is active. A typical case would be a payments provider working for a stablecoin issuer: it is allowed to burn tokens during redemptions, but should not be able to create them.

None of the reports reviewed describe the flaw being exploited, and no affected issuer has been identified. Who found the bug has not been disclosed.

The same package also corrects token recovery from trading pools, vault deposit and withdrawal math, and loan-status logic so loans are not marked late or in default before they are due.

Why the date slipped

An XRPL amendment needs more than 80% of trusted validators to back it without interruption for two weeks. The fix was first expected on October 23. On October 21, support dipped to 26 validators and recovered about two hours later, but that was enough to restart the two-week clock and push the earliest activation to November 4.

Currently 33 of the 35 tracked validators support the fix, roughly 94%. At least 29 must keep backing it until the switch. If support falls below the threshold again, the countdown resets once more.

Lending amendments are a separate track

The lending-related amendments are not part of this activation. Latest figures show the main lending amendment at 19 votes and the vault system it depends on at 21, with 29 needed for each to start its own countdown. If both reach that level on Wednesday, lending could activate as early as November 18.

What it means for traders

The fix does not touch XRP's supply, so this is an infrastructure story rather than a supply story. A reliable XRP price could not be retrieved for this article, so no price figures are quoted.

For anyone holding XRP or tokens issued on XRPL, two things are worth watching: whether the fix activates on schedule (another validator dip would push it back again) and how the vote count for the lending and vault amendments develops. News like this tends to affect price only indirectly, through sentiment about network safety, so the reaction around activation may be modest, although other market forces can easily dominate, especially while major exchanges are still under pressure after the recent hack.

Futures traders should remember that a network upgrade is rarely the only driver of funding rates or liquidations; macro conditions and overall flows usually matter more. The position and liquidation calculator can help check risk before opening a trade.

More news