XRP Ledger fix for token issuance flaw nears activation

Traders Union
All News
Crypto
XRP Ledger token flaw fix

Highlights

XRP Ledger amendment fixCleanup3_4_0 is set to activate around Nov. 4 after 33 of 35 validators backed it for the required two weeks.
The fix targets a flaw exposing issuer tokens to unauthorized minting, affecting issued tokens but not XRP itself, and enforces explicit separation of issuance and burning permissions.
Additional network upgrades correct issuer recovery calculations in trading pools and prevent premature loan defaults, though lending and vault amendments remain below the 29-vote threshold for activation.

Validator backing and activation timeline

As reported by CoinDesk, the XRP Ledger amendment known as fixCleanup3_4_0 is expected to activate on Wednesday with support from 33 of 35 tracked validators. Under the network's rules, changes to transaction processing require more than 80% backing for two uninterrupted weeks, which means at least 29 validators must continuously support the update in the current tracker count.

The amendment was originally expected to activate on Oct. 23, but support fell to 26 validators on Oct. 21 before recovering about two hours later. That interruption restarted the countdown and pushed the earliest activation window to around 14:46 UTC on Nov. 4, provided support remains in place through the next network voting checkpoint.

The flaw allows an account that is meant to have permission only to destroy an issuer's tokens to create new ones under certain conditions. In practice, that means a stablecoin partner handling customer redemptions could potentially mint tokens unless issuance and burning permissions are properly separated, which this fix is designed to enforce.

Stablecoin safeguards and broader network impact

The XRP Ledger's official documentation currently warns developers not to grant token-burning permission until the correction takes effect. The issue applies to tokens issued on the ledger, including stablecoins, but it does not affect XRP itself or its supply mechanics.

The same update also corrects calculations tied to issuer token recovery from trading pools, as well as deposit and withdrawal accounting for vaults that pool assets. Another change prevents a loan from being marked late or in default before its due date has actually passed.

Those lending-related repairs are arriving before the lending service itself is ready to launch. According to XRPL Dashboard, the main lending amendment has 19 votes and the vault system it depends on has 21, both below the 29 votes needed to start their own two-week activation period; if they were to reach that threshold on Wednesday, the earliest possible activation would be Nov. 18.

Our earlier report on the Bank of England’s push for “bare metal” recovery planning explained how regulators want major banks to be able to restore critical services even if primary systems are compromised. It also highlighted concerns that AI is increasing the scale and complexity of cyberattacks, prompting supervisors to demand stronger end-to-end resilience and recovery options across the financial system.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.