The vulnerability has been fixed, XRP Ledger activates fixCleanup3_4_0
Odaily reports that according to XRP Ledger monitoring, XRP Ledger activated a fix named fixCleanup3_4_0 at 22:52 Beijing time on November 4, closing a vulnerability: certain accounts originally authorized only to destroy issuer tokens could, under specific conditions, also create new tokens. The vulnerability affected the network's permissioned delegation system—for example, stablecoin issuers could authorize payment processors to destroy tokens when customers redeem them, but not grant them permission to create new tokens; under the old rules, accounts holding limited destruction permissions could also mint tokens. The vulnerability affected assets issued on XRP Ledger, including stablecoins, but did not affect XRP itself, and there are currently no publicly confirmed cases of exploitation.
