XRP Ledger Upgrades and Restarts Support Account Permission Splitting and Compliant Payments

ChainCatcher report: The XRP Ledger's PermissionDelegationV1_1 upgrade entered a 14-day activation countdown on September 21, having received support from 29 of 35 trusted validation nodes. If support remains above 80% throughout the period, the upgrade may be officially activated as early as October 5 at 11:18 UTC; at least 28 validation nodes must continue supporting it, or the countdown will reset. This feature allows accounts to split permissions by role—for example, a stablecoin issuer can permit an online compliant system to approve customer accounts holding its tokens, while keeping the key with full control offline; operational accounts can be granted payment permissions without the ability to change keys or delegate authority to others. Each delegate may receive up to 10 permissions, and the main account can modify or revoke them at any time. This is the network’s second attempt to introduce this feature. The original version contained a vulnerability allowing attackers to cause others to pay transaction fees using improperly signed transactions and drain victims’ XRP balances by repeatedly submitting high-fee transactions. The vulnerability was reported by community testers on September 15, 2025, and validators were advised to reject the amendment, so it was never activated. The fixed version, released with xrpld 3.3.0, changes how unauthorized transactions are rejected, ensuring fees are not deducted until signature verification is complete.