The XRP Ledger network is preparing to close a logic flaw in its token permission system. Starting November 4, 2026, at around 14:46 UTC, an amendment named fixCleanup3_4_0 is scheduled to activate on the main ledger after securing majority support from validators. The update aims to patch a vulnerability in the delegated PaymentBurn permission that could invert asset burning into minting new tokens.
How Burn Permissions Turned into Token Minting
The DelegateSet transaction feature lies at the core of the issue. The XRPL delegation mechanism allows an account to grant up to 10 specific permissions to operational accounts without sharing master keys. In daily operations, this functionality plays a crucial role in regulatory compliance for stablecoin issuers, including customer identity verification requirements.
The vulnerability emerges within the PaymentBurn permission. Accounts intended only to be authorized to burn tokens on an issuer’s behalf could instead mint new trust line tokens or Multi-Purpose Tokens (MPTs) under certain conditions. The flaw does not affect the native XRP supply, but poses risks to third-party assets issued on the ledger, such as trust line tokens and stablecoins.
Official XRPL documentation has issued specific warnings advising issuers to avoid delegating PaymentBurn permissions while the amendment is not yet fully active on the network. A technical patch has been available since September 16, 2026, via the xrpld server software version 3.4.0 release. The new code automatically rejects PaymentBurn transactions if a balance crosses the zero boundary.
Validator Quorum and the Two-Week Countdown
Tracking data from XRPLWin shows that 33 of 35 active trusted validators (UNL), or 94.29%, currently approve the fixCleanup3_4_0 amendment. That level of support clears the network’s 80% minimum consensus threshold, equivalent to 29 validators. However, the XRPL consensus system enforces a strict rule: validator support must remain above 80% for two uninterrupted consecutive weeks for the upgrade code to execute automatically on the main ledger.
The November 4 activation date is not the first attempt. A validator majority was previously reached between October 9 and October 21, 2026, before quorum was abruptly lost. After support stabilized back above the 80% mark on October 21, the two-week countdown restarted from scratch toward the early November activation target.
Value Fixes in Single Asset Vault
The fixCleanup3_4_0 amendment package does not only patch PaymentBurn. The update also corrects rounding calculations on deposits, withdrawals, and clawback features in Single Asset Vault. These rounding formula adjustments are implemented to prevent over- or under-delivering assets when users interact with single asset vaults.
For asset issuers and stablecoin managers on XRPL, developers’ warnings remain in place until the activation date arrives: avoid enabling PaymentBurn delegation until validators finalize locking the amendment on the main ledger.
Reported by crypto.news.
Also read: How to Read Candlestick Charts for Beginners
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
