XRP Ledger Activates an Amendment Closing a Flaw That Let Token Burners Create New Tokens

The XRP Ledger activated the amendment fixCleanup3_4_0 on Wednesday at 14:52 UTC, at ledger 108,112,129, closing a flaw in its permission delegation system, CoinDesk reported, citing XRPLWin. The bug meant an account authorized only to burn an issuer’s tokens could, under certain conditions, also create new ones.

Crypto Insiders explained the practical case: an account an issuer authorizes to remove tokens from circulation, for example when stablecoins are redeemed for dollars, could make a payment that created new tokens. The amendment now rejects such payments unless the account also has explicit permission to mint. The flaw affected assets issued on the ledger, such as stablecoins, not XRP itself. CoinDesk reported no publicly confirmed exploitation, and neither outlet said how many tokens, if any, were created.

The fix shipped in software released on September 17, but activation needs support from more than 80% of trusted validators for 14 consecutive days. On October 21 support briefly dipped below the threshold, which restarted the countdown and delayed activation. The second attempt held for two uninterrupted weeks.

The release also corrects accounting for planned lending and Single Asset Vaults, token recovery from automated trading pools, permissioned trading and transaction signing. For issuers, the main takeaway is that delegated permissions on the ledger now follow the narrower scope that was intended.

Track the market yourself with AiTraderView’s FREE tools: Crypto Cockpit for charts and 75+ indicators, Crypto Screener to find setups, and Crypto Portfolio to follow your holdings. Just create a FREE account and try them yourself!

Sources:

• CoinDesk: XRP Ledger closes bug that let approved token burners create new tokens

• Crypto Insiders: XRP-netwerk dicht fout waardoor extra cryptomunten konden ontstaan