A privacy feature built for institutional money is going to a vote on the XRP Ledger, where more than $530 million of tokenized real-world assets already sit.
XRPL version 3.3.0, released this week, includes six proposed amendments. Among them, a “Confidential Transfers” update is the one aimed squarely at institutional users, encrypting balances and payment amounts on Multi-Purpose Tokens, the format Ripple has been pitching for funds, bonds and other financial assets.
The idea is to let an institution move tokens without publishing the size of every position and transfer. Accounts and the type of token being moved stay visible, while individual balances and payment amounts can be encrypted.
As such, the ledger can still check that the sums add up without being able to read them, using a cryptographic method that proves a transaction is valid without revealing the numbers behind it.
Ripple has spent much of 2026 pushing XRPL deeper into tokenized finance. Aviva Investors last month launched a tokenized share class of its U.S. Dollar Liquidity Fund on the ledger after announcing the project with Ripple in February.
There is already money on the chain for the feature to serve. Onchain data aggregator RWA.xyz tracks about $1.38 billion of distributed real-world assets on XRPL, including $845.7 million of RLUSD. Ondo accounts for another $212.6 million, followed by VERT Capital at $116.1 million and Archax at $55.4 million. Societe Generale sits further down the table at $11.6 million.
That leaves more than $530 million of tracked tokenized assets outside RLUSD, though the market remains concentrated in a handful of issuers.
Confidential Transfers stays narrow in its first version. Holders have to opt into the encrypted format, and it currently works for direct MPT payments between accounts. It does not cover trades on XRPL's built-in exchange, escrow or checks.
The other five are aimed at the same audience. Batch can package as many as eight transactions together, including an all-or-nothing mode where every step succeeds or none does. Sponsor lets one account cover another's fees and reserve requirements, removing the need for a new user to hold XRP before transacting.
Permission Delegation lets an account authorize another party to submit only specified transaction types, giving a fund administrator limited authority without handing over full control. Dynamic MPT lets issuers change certain properties of a token after issuance.
Version 3.3.0 also bundles a set of fixes and, according to XRP Ledger Operations, cuts memory use by at least 10% to 15% while improving how quickly nodes catch up with the network.
None of the changes are live yet. XRPL amendments require at least 80% support from trusted validators, held continuously for two weeks, before they activate.
Confidential Transfers now has to clear that vote. After that comes the more useful test — whether Aviva, Ondo or another institution already issuing assets on XRPL actually chooses to hide balances and transfer sizes rather than leave them public.