XRP Ledger Fixes Critical Security Vulnerability Affecting Token Minting Permissions
The XRP Ledger (XRPL) has activated a security fix addressing a vulnerability that could, under certain conditions, allow accounts authorized to burn tokens to also create new tokens. The update, identified as fixCleanup3_4_0, went live on November 4 and strengthens the separation between token-burning and token-minting permissions.
According to CoinDesk, the vulnerability involved XRPL's Permission Delegation feature, which allows one account to authorize another to carry out specific actions on its behalf. Under certain circumstances, delegated accounts with permission to burn tokens could also gain the ability to mint them.
How the XRP Ledger Vulnerability Worked
Permission Delegation is designed to let account holders assign specific authorities to other accounts. This allows designated accounts to perform approved operations without requiring the original account holder to execute each action directly.
However, the vulnerability created a potential overlap between two distinct permissions. An account authorized to burn tokens, including stablecoins issued on the XRP Ledger, could in some cases also exercise minting authority.
The fixCleanup3_4_0 update addresses this issue by separating the permissions, preventing token-burning authorization from also providing the ability to mint new tokens under the affected conditions.
XRPL Security Issue Did Not Affect XRP Supply
The reported vulnerability did not affect XRP's native supply or its production mechanism, according to the statement cited in the report. Instead, the potential risk was limited to stablecoins and other tokens issued on the XRP Ledger.
The November 4 activation of the fix addresses the identified permission issue. The available information does not indicate that XRP itself was affected by the vulnerability.
source: en.bitcoinsistemi
Writer: Ethan Collins
Crypto Journalist
Ethan Collins reports on developments across the cryptocurrency and blockchain sector. His work covers market movements, protocol updates, regulatory changes, and emerging trends in digital assets.
He focuses on presenting complex topics in a clear and accessible manner for a broad readership.
Check out other news and articles on Google News
Disclaimer:
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.