XRP Ledger to Seal a Token-Burn Loophole Wednesday With Validator Backing

The XRP Ledger is flipping the switch on a security fix Wednesday. The patch shuts a loophole that let accounts with permission to burn tokens also spin up new ones — a two-for-one the ledger never intended to hand out. According to CoinDesk, 33 of the network's 35 trusted validators have already signaled support, well past the threshold needed to activate.

The flaw lives in the permissioned side of the ledger, where issuers hand out roles to trusted parties. Burn authority is supposed to be a one-way street: destroy supply, don't create it. Under the old behavior, whoever held that power could do both, quietly inflating a token's supply.

That's a particular headache for stablecoin issuers, who lean on burn permissions to pull coins out of circulation when redemptions come in. If the same keys can conjure tokens back, the math behind a peg gets a lot shakier.

Validator support is the gate that matters here. On the XRP Ledger, an amendment locks in once a supermajority of trusted validators backs it for a set stretch of time — and this one has already cleared that bar ahead of Wednesday's activation.

Once live, burn permissions behave as advertised: authorized parties can take tokens out of supply, but not put new ones back. The fix lands as a quiet patch rather than a headline upgrade, but for anyone issuing tokens on the ledger, it's the difference between a controlled supply and an open tap.