XRP Ledger Security Patch for Unauthorized Stablecoin Issuance Vulnerability Applied on the 4th

The XRP Ledger will fix a security vulnerability that allows unauthorized issuance of stablecoins. The issue involved an external account with delegated specific permissions being able to create tokens without the issuer's approval, which could impact the asset management and security of stablecoin issuers. The XRP Ledger plans to activate the security fix 'fixCleanup3_4_0' on the 4th at 2:46 PM (UTC). This vulnerability was discovered in the delegation feature introduced on October 8, which was designed to allow issuers to delegate certain tasks to external accounts without sharing the main security keys. The problem is that accounts with the 'PaymentBurn' permission could issue new tokens instead of burning them under certain conditions. This could lead to a risk of mismatch in the token supply. The vulnerability could affect both standard tokens and multi-purpose tokens (MPT), but it does not impact the supply of XRP itself or the XRP balances of regular users. During the application of the security patch, the approval rate of validators acted as a variable, with 33 out of 35 validators supporting the amendment, resulting in a 94.3% approval rate. This update also includes fixes related to lending, AMM, and NFT errors.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.