RippleX Says Batch 2.0: Electric Boogaloo, But This Time the Signers Actually Check Out 🔁

RippleX is preparing to ship xrpld 3.3.0 the week of August 1, 2026, bundling five amendments for validator consideration, including rewritten versions of Batch and Permission Delegation — two features that were pulled before mainnet activation after security researchers uncovered separate critical authorization flaws in their original implementations. No funds were lost. The amendments now require an 80% validator threshold to activate.

The original Batch amendment contained a signature-validation bug that allowed an attacker to execute inner transactions from arbitrary victim accounts without ever holding their private keys. According to the official XRPL vulnerability disclosure, researcher Pranamya Keshkamat and Cantina AI's autonomous audit tool Apex identified the flaw on February 19, 2026, while the amendment was still in its voting phase. UNL validators were advised to vote against it the same evening, and an emergency release, rippled 3.1.1, marked both Batch and the related fixBatchInnerSigs amendment as unsupported to prevent any activation path.

The root cause was a loop-exit error in the signer-validation logic: when the code encountered a new account whose signing key matched its own, it declared success and exited without checking the remaining signers, meaning a forged signer entry for any victim account would never be inspected. The exploit path would let an attacker drain a victim account down to its reserve through unauthorized Payment transactions. The replacement, BatchV1_1, redesigns that authorization logic and is now flagged in the source as fixing the original failure mode.

Permission Delegation, the second amendment being reintroduced, had its own authorization issue that prompted validators to withhold support during its prior voting window. The specifics of that flaw were disclosed separately by security researchers prior to the amendment being marked unsupported. The rewritten version is being packaged alongside BatchV1_1 in the 3.3.0 release for a fresh validator vote.

The remaining three amendments in the 3.3.0 package are described by RippleX as advancing tokenized-asset functionality on the XRP Ledger, including support for global transfers, trading, collateralization and settlement. RippleX contributor Jazzi Cooper noted in a July 31, 2026 post that the release "moves XRPL significantly closer to that goal." As of the latest available data, $XRP traded at $1.07, down 1.49% over the prior 24 hours.