XRP Ledger Activated PaymentBurn Fix for Minting Flaw on Nov. 4

The XRP Ledger activated a software fix for a delegation flaw that could have let some accounts mint issued tokens without authorization, while native XRP remained unaffected.

The issue involved PaymentBurn delegates. Under specific conditions, an account authorized only to destroy an issued token could also create new units. The flaw applied to assets issued on the ledger, including stablecoins, and did not affect XRP, the network’s native asset.

The fixCleanup3_4_0 amendment took effect Nov. 4 at 9:52 a.m. ET (14:52 UTC), at ledger height 108,112,129. Validators had maintained the required support for two weeks before activation.

The vulnerability was in the ledger’s permission delegation system, where the granted authority was supposed to allow token destruction only. Under the reported conditions, that restriction could be bypassed to create issued tokens.

No public exploitation case had been confirmed. The fix addresses issued assets on XRPL; native XRP was not within the affected scope.