XRP Ledger to Patch Token Minting Loophole via fixCleanup3_4_0
The network will resolve a critical permission delegation flaw affecting token issuance tomorrow.
1Activation of fixCleanup3_4_0
The XRP Ledger is scheduled to activate the fixCleanup3_4_0 amendment on November 4, 2026, at approximately 14:46 UTC. This update addresses a specific security vulnerability identified within the network's permission delegation feature. The patch successfully secured support from 33 out of 35 trusted validators, comfortably exceeding the mandatory 80% threshold required for implementation.
2Permission Delegation Vulnerability
The flaw originated from the PermissionDelegationV1_1 amendment, which went live on October 8. It allowed accounts granted the PaymentBurn permission to inadvertently mint new fungible tokens or multi-purpose tokens. Until this fix is fully deployed, developers have been explicitly advised against delegating the PaymentBurn granular permission to avoid potential unauthorized token issuance.
3Technical Scope of xrpld 3.4.0
Beyond the primary token minting fix, the xrpld 3.4.0 release includes several critical system cleanups. The package specifically rejects PaymentBurn transactions that cross a zero balance. Additionally, the update implements tighter controls for automated market maker clawbacks, escrow reserves, vault accounting, and signature handling, requiring node operators to upgrade their systems as soon as possible.
4Validator Support and Delays
The activation process faced delays after the initial target date of October 23 passed. Because the XRPL amendment protocol requires two consecutive weeks of 80% validator support, any dip in consensus forces a countdown reset. Current data confirms the amendment has regained the necessary majority, with 33 validators now backing the deployment.
5Status of Pending Upgrades
While fixCleanup3_4_0 is moving forward, other significant network upgrades remain stalled. Proposed features like LendingProtocolV1_1 and SingleAssetVault currently hold only 19 and 21 votes respectively, falling short of the 28-vote requirement. Consequently, native lending capabilities for the XRPL are currently on hold, despite growing institutional interest in the network's infrastructure.
6Broader Security Context
This patch follows a period of heightened security scrutiny for the XRP ecosystem. In September, developers quietly addressed a decade-old bug that theoretically permitted the minting of XRP beyond its fixed supply. Although there is no evidence of exploitation, these proactive measures reflect a concerted effort to harden the ledger against potential systemic vulnerabilities.
7Impact on Network Participants
The upcoming amendment does not alter the experience for standard XRP holders. However, it is highly significant for token issuers, exchanges, and businesses that utilize account permission delegation. Once the fix is live, these entities can safely resume using the PaymentBurn permission, which was previously restricted to prevent exploitation of the minting loophole.
8Institutional Market Positioning
Despite recent security patches, Ripple continues to position XRP as an institutional-grade asset for global crypto rails. With recent support from platforms like Coinbase for the RLUSD stablecoin, the network maintains its focus on enterprise utility. The successful deployment of this patch remains a critical step in maintaining network integrity for these institutional partners.
Original article: Bitcoin News — XRP Ledger to Patch Token Minting Loophole via fixCleanup3_4_0