XRP Ledger token-minting bug disclosure stories

Nov 2, 2026

XRP Ledger amendment to fix token permission flaw heads for Wednesday activation

An XRP Ledger amendment addressing a vulnerability that could allow stablecoin partners to mint unauthorized tokens has gained support from 33 of 35 trusted validators and is expected to activate on November 5.

Nov 2, 20262 sources

Oct 10, 2026

XRP Ledger patches critical bug that could have minted unlimited XRP

The XRP Ledger disclosed two software vulnerabilities on October 9, including a critical flaw from 2015 that could have allowed attackers to create new, spendable XRP. The bug remained unexploited and has been patched.

Oct 10, 20263 sources

Top claims

▪Originally expected to activate October 23, 2026, the XRP Ledger amendment fixCleanup3_4_0's two-week countdown restarted when validator support fell to 26 votes on October 21, 2026, below the required 29-vote threshold, before recovering two hours later
▪The XRP Ledger permission flaw addressed by the fixCleanup3_4_0 amendment allows accounts authorized only to destroy issued tokens to create new tokens under certain conditions, while leaving XRP's own supply unaffected
▪The XRP Ledger's fixCleanup3_4_0 amendment corrects asset calculations used when issuers recover tokens from trading pools and when users deposit or withdraw from asset vaults

Subtopics

Blockchain governance1 Blockchain security & risks1 Blockchain technology1 Crypto security1 Cryptocurrencies1 Smart contract vulnerabilities1 Smart contracts1 Stablecoins1

Related timelines