XRP Ledger targets Nov. 4 fix for unauthorized token minting

XRP Ledger has moved closer to activating a Nov. 4 fix for a flaw that can let accounts authorized only to burn issued tokens create new ones under certain conditions. Summary Developers warn issuers against delegating PaymentBurn permission until the correction becomes active. Validator backing stands at 33 of 35, with activation dependent on sustained support. The flaw concerns issued tokens, including stablecoins, without affecting XRP’s native supply. The amendment includes separate repairs for trading pools, vault accounting, and loan checks. XRPL’s official documentation identifies the problem in PaymentBurn, a permission designed to let another account destroy fungible tokens on an issuer’s behalf. Until the fixCleanup3_4_0 amendment takes effect, a delegate holding that permission can sometimes mint trust line tokens or Multi-Purpose Tokens, known as MPTs. The warning specifically excludes other granular permissions from the flaw. Its recommendation is to avoid delegating PaymentBurn while the correction remains pending. XRP Ledger fix separates token burning from issuance In the permission reference, XRPL lists PaymentMint and PaymentBurn as separate functions. PaymentMint...