XRP Ledger (XRP) Fix to Stop Burn-Only Accounts Minting Due Nov 4

By Nodora News · 3 November 2026

The XRP Ledger (XRP) is set to activate fixCleanup3_4_0 on Nov 4, closing a flaw that let burn-only accounts mint stablecoins. XRP supply isn't affected.

The XRP Ledger, the blockchain behind XRP, is set to switch on a fix on Wednesday, November 4, that closes a loophole in how token permissions work. Under certain conditions, an account that a token issuer had allowed only to destroy (burn) its tokens could also create (mint) new ones. The fix, an amendment called fixCleanup3_4_0, has the backing of 33 of 35 trusted validators and can activate from about 14:46 UTC on November 4 if that support holds. XRP's own supply is not affected; the flaw only concerns tokens that other companies issue on the ledger, such as stablecoins.

Key takeaways

• The fixCleanup3_4_0 amendment closes a flaw that could let a burn-only account mint an issuer's tokens.
• It has 33 of 35 validator votes, well above the 29 it needs, and can go live around 14:46 UTC on Nov 4.
• Activation was delayed by almost two weeks after support briefly dipped below the threshold on Oct 21.
• XRP's supply is untouched. The risk sat with issued tokens like stablecoins, and XRP was trading near $1.25 on OKX.
• The XRPL lending protocol is still short of the votes it needs, so it's further off.

What happened with the XRP Ledger permission flaw

The XRP Ledger lets one account hand specific powers to another. A stablecoin company, for example, might let a payments partner burn tokens when customers cash them in for dollars, without giving that partner the right to issue new ones. Those two powers are supposed to stay separate.

The bug broke that separation. In some situations, an account that had only been given permission to burn an issuer's tokens could also mint fresh ones. For a stablecoin, that would mean new coins appearing that the issuer never approved, which goes straight to the question of whether every token is properly backed.

There are no reports that anyone has exploited it. The network's official documentation currently tells developers not to grant the token-burning permission at all until the correction is live.

How the fixCleanup3_4_0 amendment gets activated

Changes to the XRP Ledger's transaction rules go through a vote among validators, the independent operators whose servers check transactions and agree on the ledger's history. An amendment needs more than 80% support, held without a break for two weeks.

The numbers right now:

• Votes in favour: 33 of 35 trusted validators (about 94%), per XRPL Dashboard and the XRPLWin and XRPSCAN explorers.
• Votes needed: 29.
• Majority held since: October 21, 2026, 14:46 UTC.
• Earliest activation: November 4, 2026, around 14:46 UTC (about 1:46 a.m. Melbourne time on Nov 5).

The fix was first expected on October 23. On October 21, support fell to 26 validators for roughly two hours. Even a short drop below 80% resets the two-week clock, so the countdown had to start again once support came back. If support dips again before Wednesday, it will reset once more.

What else the update fixes

The amendment is a bundle of corrections, not just the permission fix. Code shipped in xrpld 3.4.0 also touches several other parts of the ledger:

• Trading pools: it fixes the maths used when an issuer pulls back (claws back) its tokens from an automated market maker pool.
• Vaults: it corrects calculations when users deposit to or withdraw from vaults that pool assets.
• Loans: it stops a loan from being marked late or in default before its due date.

The loan fix lands before the lending feature itself. The main lending amendment has only 19 validator votes and the vault system it depends on has 21. Both need 29 to start their own two-week countdowns. Even if they got there on Wednesday, lending couldn't go live before about November 18.

Why it matters for XRP and stablecoins

The XRP Ledger wants to be a home for stablecoins and tokenised real-world assets, and that pitch depends on issuers knowing their controls work. Being able to give a partner narrow, limited powers is a key part of that. A bug that turns "you can burn" into "you can also print" is exactly what a regulated issuer can't live with.

That makes this a quiet but important fix. It's the kind of work that matters as more traditional finance moves onto blockchains, a trend seen this week in Hong Kong's push toward 24/7 tokenized settlement and stablecoin trials. It also lands while the industry is still on edge over security after the record Binance hack.

XRP price and market reaction

So far the market isn't reacting to the news. On OKX, XRP was trading around $1.249, roughly flat (-0.1%) over 24 hours, in a tight range of $1.242 to $1.265. Bitcoin (BTC) was near $77,740, also little changed.

You can follow XRP and other major coins on the Nodora charts page.

What to watch next

• Nov 4, ~14:46 UTC: whether fixCleanup3_4_0 keeps its majority and activates. If support slips to 80% or lower even once, the two-week clock starts over.
• Issuer guidance: once the fix is live, check whether the XRPL docs lift the warning against granting burn permissions.
• Lending votes: whether the lending and vault amendments get close to the 29 votes they need, which would set up a possible launch in late November.

This article is for information only and is not financial advice.

#XRP #XRP Ledger #Stablecoins #Security #Network Upgrade

This article is general information, not financial advice.