The XRP Ledger initiated a 14-day countdown toward the activation of the PermissionDelegationV1_1 amendment on September 21, 2026. A total of 29 out of 35 trusted validators have approved the change, paving the way for the new feature to go live on the mainnet on October 5, 2026, at 11:18 UTC.
The launch hinges on sustained validator support. Network rules establish an 80 percent minimum approval threshold, equivalent to 28 out of 35 validators. If affirmative votes fall below that threshold before the 14-day period concludes, the timer will immediately reset and the process must start over from the beginning.
A Second Attempt to Close the Exploit
The protocol update marks a second attempt for the XRP ecosystem. An earlier version of the delegation system was retracted after introducing a foundational security vulnerability. The flaw in the first iteration allowed attackers to force other accounts to pay transaction fees without proper signatures, putting victims’ XRP balances at risk of being drained through fee manipulation.
Developers overhauled the code to eliminate the vulnerability in PermissionDelegationV1_1. The amendment is bundled into the xrpld 3.3.0 software release, which also introduces several additional network features, including BatchV1_1, ConfidentialTransfer, DynamicMPT, and Sponsor.
Separating Authority and Master Keys
The primary function of delegation lies in how it partitions user access rights. The new system enables an XRP account to grant limited authority to third parties for specific tasks, such as executing payments, without requiring account owners to surrender control of their master keys.
The delegation architecture offers a practical solution for financial institutions such as stablecoin issuers. They can keep master keys stored securely offline without internet access, while always-online compliance systems receive specific permissions solely to approve customers holding tokens.
The permission-sharing system is designed to accommodate multiple needs simultaneously. Each delegate account can hold up to 10 distinct permissions from other parties. The primary account owner retains ultimate control, with full capability to modify limits or revoke permissions immediately when no longer needed for operations.
For businesses seeking daily transaction efficiency, separating security and compliance layers bridges the gap between keeping assets secure offline and instantly approving customer activities. Reported by CoinDesk.
Read also: How to Read Candlesticks for Beginners
Read also: Evernorth Issues $30M Bond Ahead of Nasdaq Merger - Move Locks 473M XRP in Vaults
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
