XRP Ledger Fixes Token Minting Bug Tomorrow

A Crucial Security Patch Arrives on the XRP Ledger

The XRP Ledger (XRPL) is preparing for an important software upgrade.

On Nov. 4, 2026, at approximately 14:46 UTC, a patch named fix Cleanup3_4_0 is scheduled to go live.

This upgrade closes a specific flaw in the network's permission delegation system.

Before this patch, accounts authorized to burn tokens could unexpectedly create new ones under specific conditions.

How the Token Minting Loophole Worked

To understand the issue, let us look at permission delegation on the XRPL.

Permission delegation allows account owners to assign specific actions to another account.

This feature was launched on Oct. 8 through the Permission Delegation V1_1 amendment.

It lets users delegate authority without sharing their private master keys.

One of these delegated powers is called Payment Burn.

Payment Burn is designed solely to let a designated delegate destroy tokens.

However, official XRPL documentation identified an unintended side effect in the system.

A delegate holding Payment Burn permissions could also mint new fungible tokens.

This could occur when handling trust line tokens or Multi-Purpose Tokens (MPTs) in certain scenarios.

Because of this risk, official guidance recommended avoiding delegating the Payment Burn permission until the patch goes live.

Importantly, all other delegated permissions remained unaffected and fully secure.

Why the Activation Date Slipped

You might wonder why this fix is landing now instead of earlier.

Upgrades on the XRP Ledger follow a strict consensus mechanism.

An amendment requires sustained support from at least 80% of trusted network validators.

In addition, that 80% voting threshold must hold for two consecutive weeks.

If validator support drops below 80% even once, the two-week countdown resets.

This exact situation happened in mid-October.

The patch was initially expected to activate around Oct. 23.

However, support temporarily dipped, restarting the 14-day clock on Oct. 21.

According to tracking data from Xrpscan, support has since recovered strongly.

Currently, 33 out of 35 trusted validators back the upgrade.

This comfortably clears the 28-vote threshold needed for activation.

What Else Comes with the Software Update?

The fix is bundled inside the broader xrpld 3.4.0 software package.

Node operators were advised to upgrade their node software as soon as possible.

Beyond resolving the minting loophole, the software package includes several maintenance improvements:

• Payment Burn Enforcement: It rejects Payment Burn transactions that cross a zero balance.
• Automated Market Maker (AMM) Adjustments: It tightens rules around AMM clawbacks.
• Vault & Reserve Management: It refines vault accounting calculations and escrow reserve parameters.
• Security Enhancements: It improves general signature handling across network nodes.

Native Lending Plans Remain Short of Votes

While fix Cleanup3_4_0 has secured activation, other proposed network upgrades are still lagging behind.

A series of amendments aims to introduce native decentralized lending directly to the XRPL.

These voting tallies show the current status of the pending lending amendments:

• Lending Protocol V1_1: Backed by 19 validators.
• Original Lending Protocol: Backed by 19 validators.
• Single Asset Vault: Backed by 21 validators.

Because all three fall below the required 28-vote line, none have started a countdown timer.

As a result, native lending functionality on XRPL remains on hold.

Despite this pause, institutional activity on the network continues to expand.

For instance, Coinbase recently added support for RippleXRP+2.02%'s RLUSD stablecoin across XRPL and other chains.

A Look Back at Recent Security Updates

This upcoming patch follows a busy period for network maintenance.

Last month, developers revealed details about a decade-old ledger vulnerability.

That old flaw could theoretically have allowed an attacker to mint XRP beyond its fixed supply limit.

Fortunately, developers patched that vulnerability quietly in September 2026, and evidence showed it was never exploited.

Additionally, XRP was involved in a recent security breach on Binance.

However, that exploit targeted Binance's central wallets rather than the underlying XRPL network protocol.

What Everyday XRP Holders Need to Know

If you hold XRP in a personal wallet, you do not need to take any action.

The fix Cleanup3_4_0 upgrade primarily affects token issuers, exchange operators, and businesses managing delegated permissions.

Once the amendment activates on Nov. 4, delegating Payment Burn permissions will become safe again.

On Nov. 3, ahead of the upgrade, XRP was trading near $1.25 — though cryptocurrency markets remain subject to short-term price fluctuations.

Past performance of digital assets is not an indicator of future results. You can review historical trading data at bitkub.com/th/market/XRP.

Long-Term Vision for XRP

Looking ahead, network leaders maintain a positive long-term outlook for the ecosystem.

Ripple CEO Brad Garlinghouse sees XRP continuing to emerge as the institutional gold standard for crypto rails over the next five years.

As security patches like fix Cleanup3_4_0 roll out, the XRPL continues to reinforce its technical foundation for global financial applications.