Skip to content
Basis Desk

New from Basis Desk: free Telegram proxies for places where Telegram is blocked or slowed down.Connect in one tap →

Tech & Protocols · 1 min read

XRPL Activates fixCleanup3_4_0 Amendment to Resolve Permission Delegation Flaw

The ledger patch fixes an issue where delegates assigned to burn tokens could inadvertently mint new fungible assets.

Editorial oversight: Julian Mercer, Chief Editor
Neutral

At a glance In effect

What happened
XRPL activated the fixCleanup3_4_0 amendment on Nov. 4, 2026, resolving multiple protocol issues across decentralized finance modules and permission delegation.
Why it matters
The fix closes a loophole where accounts with PaymentBurn permissions could mistakenly mint fungible tokens or Multi-Purpose Tokens.
Who is affected
XRPL node operators, token issuers using granular permission delegation, and users of XRPL AMMs and Single Asset Vaults.
Takes effect
Nov 4, 2026
What's next
Issuers can safely grant PaymentBurn permissions to delegate accounts following amendment activation.
Primary source
xrpl.org: Permission Values

Key points

  • The XRPL fixCleanup3_4_0 amendment was enabled on Nov. 4, 2026, at ledger 108,112,129 after a 14-day voting period.
  • The patch resolves a flaw allowing delegates with PaymentBurn permission to mint fungible tokens under specific conditions.
  • The amendment also bundles maintenance fixes for Single Asset Vaults, Lending Protocol, AMMs, NFTs, and MPTs.

The XRP Ledger activated the fixCleanup3_4_0 amendment on Nov. 4, 2026, at ledger index 108,112,129, introducing a bundle of technical corrections across multiple core protocols 2. The amendment reached activation after sustaining validator majority across a mandatory two-week voting window 2.

A critical correction within the update addresses the ledger's permission delegation engine 1, 2. According to XRPL documentation, users were previously advised against delegating the granular "PaymentBurn" permission 1. Before the activation of fixCleanup3_4_0, accounts granted the PaymentBurn permission could inadvertently mint new fungible assets, such as trust line tokens or Multi-Purpose Tokens (MPTs), under certain transaction conditions 1. The activation removes this risk, restricting PaymentBurn delegates exclusively to transactions that destroy tokens without dropping balances below zero 1.

Broad Protocol Maintenance

Beyond fixing permission delegation logic, fixCleanup3_4_0 delivers targeted cleanups across several ledger features introduced in the xrpld 3.4.0 software release 2. Explorer data records that the amendment includes fixes for Single Asset Vaults, the native Lending Protocol, automated market makers (AMMs), the permissioned decentralized exchange (DEX), trust lines, NFTs, escrow, sponsorship mechanisms, and cryptographic signing functions 2. Earlier network discussions also focused on validator reliability; for instance, core developers recently addressed an XRPL bug dropping rotated validators from amendment votes to maintain consensus stability.

Network data shows the amendment originally entered validator voting after being introduced in xrpld 3.4.0 on Sept. 17, 2026 2. An initial voting attempt lost its required validator majority on Oct. 21, 2026, before regaining consensus the same day to begin its successful 14-day activation countdown 2. At the time of writing, native asset $XRP traded at $1.32.

Sources

  1. [1] Permission Values — xrpl.org, November 5, 2026
  2. [2] fixCleanup3_4_0 amendment on XRPL: enabled Nov 4, 2026 - XRPLWin Explorer — xrplwin.com, November 4, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.