XRP Ledger’s “No Minting Without Permission” Patch Lands Before November 4 🛠️

The XRP Ledger has proposed an upgrade intended to prevent accounts with burning permissions from minting stablecoins or other issued tokens without separate issuer approval. Thirty-three of thirty-five validators backed the amendment, with November 4 the earliest activation date.

The security issue affects accounts holding the PaymentBurn permission, which normally authorizes the destruction of issued tokens. Under certain conditions, those accounts could create tokens without also receiving the separate PaymentMint permission, according to official XRP Ledger documentation. The amendment would also correct vault calculations and prevent some loan records from displaying overdue payments before their contractual deadlines.

XRPL developers included the fix in the fixCleanup3.4.0 amendment, which is part of XRP Ledger version 3.4.0 released in September. The fix applies to issued assets, including stablecoins and multipurpose tokens, while the supply of XRP does not depend on the affected permission mechanism.

The proposal comes after developers addressed a separate security vulnerability through an emergency software release in October. That incident involved the payments engine and was unrelated to the current permission issue.