The XRP Ledger deployed a software remedy on Wednesday to stop accounts with sole authorization for destroying an issuer’s tokens from generating new ones under specific circumstances.
This patch, designated as fixCleanup3_4_0, launched on Wednesday at 14:52 UTC at ledger index 108,112,129, as reported by the XRPLWin network explorer. The deployment came after two continuous weeks of validator backing following a previous rollout attempt that stalled in October.
The vulnerability impacted the network delegation framework, which enables a given account to grant another account permission for targeted tasks without relinquishing full administrative access.
For instance, a stablecoin creator could grant a payment gateway the ability to eliminate tokens when users exchange them for cash, while withholding the right to mint fresh tokens.
Previously, certain scenarios could enable an entity with restricted burning privileges to also generate tokens. The update properly enforces the boundary between these two capabilities. The change impacts network-issued tokens like stablecoins rather than the native XRP asset itself.
No public reports indicate that the vulnerability was actively exploited.
The software update additionally brings accounting adjustments for upcoming lending protocols and Single Asset Vaults, which enable participants to supply tokens to pools facilitating credit. The updates include modifications regarding how vault inflows and outflows are computed alongside the classification criteria for delinquent loans.
Additional patches address token reclamation linked to automated market makers, restricted trading operations, and transaction authorization processes.
This deployment occurred subsequent to a brief postponement stemming from the governance voting protocol on the XRP Ledger. Protocol adjustments mandate sustained backing from over 80% of trusted network validators across a period of 14 continuous days.
Read More: XRP Ledger set to fix flaw that could have let stablecoin partners print new tokens
Originally published at https://www.coindesk.com/markets/2026/11/05/xrp-ledger-closes-bug-that-let-approved-token-burners-create-new-tokens.
