The XRP Ledger's next software release will put five amendments before validators, two of which were pulled after researchers found flaws that could have allowed unauthorized transactions or fee draining.
The XRP Ledger's next software release will put five amendments before validators, two of which were pulled after researchers found flaws that could have allowed unauthorized transactions or fee draining.

The XRP Ledger's xrpld 3.3.0 release, expected next week, will ask validators to approve five amendments — including revised versions of Batch and Permission Delegation, two features pulled from the network after security researchers found critical bugs.
"XRPL has already proven it can support tokenized assets at scale. Now it's time to put these assets to use: global transfers, trading, collateralizing, and settling," Jazzi Cooper, head of product at RippleX, said Friday on X.
The five proposals — Confidential MPT, Batch, Permission Delegation, Sponsored Fees and Reserves, and Dynamic MPT — target privacy, atomic settlement, and easier institutional onboarding. Amendments only take effect once at least 80 percent of trusted validators back them for two consecutive weeks, a threshold designed so the network rather than Ripple decides what ships.
Batch and Permission Delegation return after fixes
Batch, which lets up to eight transactions across different accounts execute together so that either all succeed or none do, reached its voting phase in February. Security researcher Pranamya Keshkamat and the firm Cantina had then found a flaw in how the amendment validated signatures that would have let an attacker execute transactions from any account without holding its keys. Validators were advised to reject it, and an emergency server release marked it unsupported to prevent activation. No funds were lost because it never reached the main network.
Permission Delegation, which lets an institution grant another account narrowly scoped authority without handing over full signing power, was disclosed as vulnerable in September 2025 and disabled. The bug allowed one account to charge transaction fees to another and potentially drain its balance. The ledger's documentation has listed both amendments as obsolete since, to be replaced by revised versions.
Privacy, sponsored fees, and adjustable tokens
The other three are new. Confidential MPT combines zero-knowledge proofs, which let someone prove a statement is true without revealing the underlying data, with elliptic-curve encryption, so that balances and transfer amounts on Multi-Purpose Tokens stay private while auditors or regulators can still verify them when required.
Sponsored Fees and Reserves lets a bank or platform cover another account's XRP fees and reserve requirement, removing the need for every user to acquire XRP before transacting. Dynamic MPT lets an issuer specify at creation which token properties can be changed later, avoiding a full migration to a new token when fees or metadata need updating.
The release marks a shift from where the ledger stood two weeks ago. In mid-July, all five sat in development on the XRP Ledger's amendment tracker, and what validators could actually vote on was a set of bug-fix bundles covering the lending protocol, single-asset vaults, the permissioned exchange and multi-purpose tokens. The fixCleanup3.2.0 amendment activated July 29 with support from 30 of 35 participating trusted validators, or 85.71 percent, per XRPScan.
Approval is not automatic. The lending protocol and single-asset vault amendments have each drawn roughly a third of validator support against the 80 percent they need, and Batch already has a record of being voted down. The upgrade arrives as XRPL records increased tokenized real-world asset activity, adding about $2.6 billion in RWA value during the six months through July 26, ranking second among tracked networks behind BNB Chain, per RWA.xyz.
This article is for informational purposes only and does not constitute investment advice.