CoinDesk
The XRP Ledger is on track to activate fixCleanup3_4_0 on Nov. 4, closing a loophole that could let accounts authorized to destroy issued tokens create new ones. The update has support from 33 of 35 tracked validators; protocol changes need at least 29 validators, or more than 80%, to maintain support for two uninterrupted weeks.
A brief fall to 26 supporters on Oct. 21 restarted the countdown and pushed the earliest activation window to around 14:46 UTC on Nov. 4, subject to support holding and a network voting checkpoint. XRP’s own supply is not affected.
Why it matters
The flaw concerns issued tokens, including stablecoins. For example, a payments service might be authorized to destroy tokens when customers exchange them for dollars, but should need separate permission to issue new tokens. The fix enforces that distinction. XRPL documentation warns developers against granting the token-burning permission until the correction takes effect.
The package also repairs calculations involving token recovery from trading pools, deposits and withdrawals from asset-pooling vaults, and loan status before a due date. These changes strengthen safeguards across token operations and related financial services on the ledger.
Market impact
The fix addresses a protocol risk, but the seed states that XRP itself is unaffected. Its activation depends on validator support remaining above the required threshold through the countdown.
The lending service and its required vault system are not ready to launch: their amendments have 19 and 21 votes, respectively, short of the 29 needed to start their own two-week countdowns. If both reach that threshold on Nov. 4, their earliest possible activation would be Nov. 18.
Frequently asked questions
-
What token-permission loophole does the XRP Ledger fix address?
The flaw could let an account authorized to destroy issued tokens create new ones. The fix enforces a separation between destruction and issuance permissions.
-
How much validator support does the XRP Ledger fix have?
The update has support from 33 of 35 tracked validators. It needs at least 29, more than 80%, to maintain support for two uninterrupted weeks.
-
Why was the fix's activation delayed?
Support briefly fell to 26 on Oct. 21, below the required threshold. That restarted the two-week countdown and pushed the earliest activation window to Nov. 4.
-
Does the permission flaw affect XRP's supply?
No. The flaw concerns issued tokens, including stablecoins, and does not affect XRP’s own supply.
-
Are the XRP Ledger lending and vault systems ready to launch?
No. The lending amendment has 19 votes and the required vault system has 21, short of the 29 needed to start their two-week countdowns.
CryptoSlate
WuBlockchain
TheBlock
CoinTelegraph