The XRP Ledger is due on Wednesday to close a loophole that can let an account authorised only to destroy an issuer’s tokens create new ones, CoinDesk reports. XRP’s own supply is not affected.
The fix, called fixCleanup3_4_0, has support from 33 of the 35 trusted validators tracked by XRPL Dashboard. A rule change needs more than 80% for two uninterrupted weeks, which with 35 validators means 29 must keep backing it. It was first expected on 23 October. Support fell to 26 on 21 October and recovered about two hours later, which restarted the clock. The earliest activation is now around 14:46 UTC on 4 November.
The risk is concrete for stablecoins. An issuer might let a payments service burn tokens when customers redeem for dollars, and that service should need separate permission to mint more. The fix enforces that split, and the network’s documentation currently warns developers against granting the burn permission until it lands.
The same package corrects the calculations used when issuers recover tokens from trading pools and when users move assets in and out of vaults. It also stops a loan being marked late or in default before its due date has passed.
Those lending repairs arrive ahead of the lending feature itself. Its main amendment has 19 votes and the vault system it depends on has 21, against the 29 each needs. If both reached 29 on Wednesday, the earliest lending could switch on is 18 November.
CoinDesk’s report does not say the loophole has been used, or whether any issuer has granted the burn permission it depends on. That second fact is the only one that decides whether it ever mattered.
