All Crypto Blogs

XRP Ledger upgrade brings back features once pulled over critical bugs

coindesk.com · Aug 1, 2026 at 06:09

XRP Ledger upgrade brings back features once pulled over critical bugs
coindesk.com Aug 1, 2026

The XRP Ledger's next software release will put five new features in front of validators, two of which were pulled from the network after security researchers found flaws serious enough to warrant emergency action.

Jazzi Cooper, head of product at RippleX, said Friday that xrpld 3.3.0 is expected next week carrying Confidential MPT, Batch, Permission Delegation, Sponsored Fees and Reserves, and Dynamic MPT.

XRPL has already proven it can support tokenized assets at scale. Now it’s time to put these assets to use: global transfers, trading, collateralizing, and settling.The upcoming release of xrpld 3.3.0 includes five amendments that move XRPL significantly closer to that goal.…

Amendments are proposed protocol changes that only take effect once at least 80% of trusted validators back them for two consecutive weeks, a threshold designed so the network rather than Ripple decides what ships.

The Batch and Permission Delegation amendments have been through that process before and failed it.

Batch, which lets up to eight transactions across different accounts execute together so that either all succeed or none do, reached its voting phase in February.

Security researcher Pranamya Keshkamat and the firm Cantina had then found a flaw in how the amendment validated signatures that would have let an attacker execute transactions from any account without holding its keys.

Validators (entities that supply their resources to run and maintain a network) were advised to reject it, and an emergency server release marked it unsupported to prevent activation. No funds were lost, because it never reached the main network.

Permission Delegation, which lets an institution grant another account narrowly scoped authority without handing over full signing power, was disclosed as vulnerable in September 2025 and disabled.

The bug allowed one account to charge transaction fees to another and potentially drain its balance. The ledger's documentation has listed both amendments as obsolete since, to be replaced by revised versions.

The other three are new. Confidential MPT combines zero-knowledge proofs, which let someone prove a statement is true without revealing the underlying data, with elliptic-curve encryption, so that balances and transfer amounts on Multi-Purpose

Tokens stay private while auditors or regulators can still verify them when required.

Source

This article is syndicated for educational reading. For the latest updates, visit the original publisher.

Read on coindesk.com

Recently Used