XRP Ledger Prepares November Patch for Token Minting Flaw

The issue centers on the PaymentBurn permission, a function intended to allow authorized delegates to destroy fungible tokens on behalf of an issuer. Until the fixCleanup3_4_0 amendment is fully implemented, this permission can be exploited to mint trust line tokens or Multi-Purpose Tokens. The flaw does not impact XRP’s native supply, but poses a security risk for stablecoins and other assets issued directly on the ledger. Developers have advised issuers to suspend the delegation of PaymentBurn until the update clears the network’s validator threshold.

Support for the fix currently stands at 33 of 35 tracked validators, or roughly 94.29%. The network requires sustained support above 80% for a two-week period to finalize the upgrade, which is tentatively scheduled for 14:46 UTC on November 4. Beyond the permission repair, the amendment package includes technical adjustments for trading pools, vault accounting, and loan default checks. These corrections aim to prevent rounding errors in liquidity pools and ensure that vault withdrawals align with asset impairment status. While the ledger’s delegation system remains a core tool for stablecoin compliance and operational security, this update reinforces the separation between administrative token destruction and new issuance.