XRP Ledger Amendment to Close PaymentBurn Minting Flaw Targets Nov. 4 Activation
The XRP Ledger's fixCleanup3_4_0 amendment would stop delegated PaymentBurn permissions from minting trust line and MPT tokens. Validator support of 94.29% projects activation around Nov. 4, though the date is conditional on support staying above 80% through the two-week waiting period.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
What the Amendment Fixes
A flaw on the XRP Ledger allows an account holding only the PaymentBurn permission, a delegated power meant to destroy fungible tokens on an issuer's behalf, to sometimes create new trust line tokens or Multi-Purpose Tokens (MPTs). According to XRPL's official documentation, the flaw exists until the fixCleanup3_4_0 amendment takes effect. The fix rejects PaymentBurn payments that would cross a zero balance, a boundary the permission was designed to respect, according to the xrpld 3.4.0 release notes dated Sept. 16.
XRPL's documentation recommends that issuers avoid delegating PaymentBurn until the correction is active. The warning does not extend to other granular permissions. Neither the documentation nor the release notes identify any issuer whose tokens have been fraudulently created, and the exposure is described as applying to accounts that hold the affected delegated permission. XRP's native supply is outside the scope of the flaw; the affected categories are assets issued through trust lines or the MPT framework.
Activation Status and Conditions
The XRPLWin tracker reports that fixCleanup3_4_0 has backing from 33 of 35 tracked trusted validators, or 94.29%. Activation requires 29 supporting votes. The tracker projects activation at approximately 14:46 UTC on Nov. 4, provided support remains above 80% for the full two-week waiting period.
The voting record shows an earlier majority from Oct. 9 to Oct. 21, when the amendment dropped below the required backing and its countdown stopped. A new majority began Oct. 21, which pushed the projected date into November. A fall to 80% or below would restart the waiting period again, so the tracker treats Nov. 4 as conditional rather than confirmed.
CoinDesk's reporting describes the fix as on track for Wednesday, noting that validator support briefly dipped and restarted the two-week activation clock. Crypto.news lists the target as Nov. 4. The two outlets are consistent on the core timeline, but the CoinDesk piece gives a day of the week rather than a date and does not repeat the tracker's conditional language, so readers should treat the Nov. 4 figure as a projection that depends on validator behavior over the coming two weeks.
Delegation Model and Stablecoin Context
XRPL's delegation guide explains that an account owner grants specific powers to a second account through a DelegateSet transaction and can revoke them with another transaction of the same type. Each delegate can hold up to 10 permissions, and powers involving cryptographic key changes or the granting of further permissions cannot be delegated. The guide says granular permissions are predefined and cannot be narrowed to selected currencies, which is relevant to the PaymentBurn exposure. Stablecoin compliance is cited as a use case, including approving users who have passed identity checks.
The issue arrives as stablecoin activity on the network grows. Ripple's RLUSD launched on Coinbase on Oct. 28, across retail and institutional platforms, with support on XRP Ledger, Ethereum and Base. Ripple names Standard Custody & Trust Company, a New York-supervised limited-purpose trust company, as RLUSD's issuer. The amendment itself is not described as affecting RLUSD specifically, and the sources do not link the PaymentBurn flaw to any particular issued stablecoin.
The same amendment package also includes changes to Single Asset Vault deposits, withdrawals and clawbacks to prevent rounding from over- or under-delivering assets, and repairs to trading-pool clawback behavior. Both sources were cut off or summarized before covering these in full, so their details are not assessed here.
Why It Matters
For Traders
XRP's native supply is outside the flaw, so the Nov. 4 date matters mainly for trust-line and MPT token holders, and the timing depends on validator support holding above 80%.
For Investors
A fix to a permission flaw on a network hosting regulated stablecoins signals active governance and tighter controls on token issuance over the longer term.
For Builders
Issuers and integrators should avoid delegating PaymentBurn until the amendment activates and review any permission setups that rely on it.
This article is for information only and is not financial advice. Read the full disclaimer.
