XRP Ledger Patches Vulnerability Allowing Unauthorized Token Creation

ChainCatcher report, according to CoinDesk, the XRP Ledger activated a fix named "fixCleanup3_4_0" at 22:52 Beijing Time on November 4. This fix patches a vulnerability whereby certain accounts, originally only authorized to "destroy" issuer tokens, could under specific conditions create new tokens. The vulnerability affected the network’s permissioned delegation system—for example, stablecoin issuers may authorize payment processors to destroy tokens when customers redeem them, without granting them the authority to create new tokens; under the old rules, accounts with limited destruction permissions could potentially mint new tokens. This vulnerability impacted assets issued on the XRP Ledger, including stablecoins, but did not affect XRP itself, and no publicly confirmed exploitation cases have been reported. The fix also includes accounting corrections for the planned lending system and Single Asset Vaults, as well as fixes for automatic liquidity pool token recycling, permissioned transactions, and transaction signing. Activation was completed after two consecutive weeks of support following a failed attempt in October due to validator support interruptions.