XRP Ledger to Revive Two Features Pulled Over Security Flaws in Major v3.3.0 Upgrade

The XRP Ledger is preparing to ship a significant software update week that will reintroduce two protocol features previously scrapped over critical security vulnerabilities, alongside three new amendments designed to attract institutional capital by enhancing privacy and simplifying user onboarding.

Jazzi Cooper, head of product at RippleX, confirmed that the xrpld 3.3.0 release will carry five proposed amendments: Confidential MPT, Batch, Permission Delegation, Fees and Reserves, and Dynamic MPT. The software release is expected week, though the amendments will not activate immediately. Under the XRP Ledger's governance model, each proposal must secure at least 80% support from trusted validators for two consecutive weeks before taking effect.

"XRPL has already proven it can support tokenized assets at scale. Now it's time to put these assets to use: global transfers, trading, collateralizing, and settling," Cooper said in a post on X. She added that the five amendments would move the network closer to supporting those activities.

The upgrade follows the activation of fixCleanup3_2_0 on July 29, which received support from 30 of 35 participating trusted validators, or 85.71%, according to XRPScan data. That activation made version 3.2.0 the minimum software release compatible with the updated mainnet rules, blocking nodes running version 3.1.0 or earlier from following validated ledgers.

Two of the five amendments now heading back to validators carry a checkered history.

The Batch amendment, which allows up to eight cross-account transactions to execute atomically so that either all succeed or none do, reached its voting phase in February. Security researcher Pranamya Keshkamat and the firm Cantina subsequently found a flaw in how the amendment validated signatures that would have let an attacker execute transactions from any account without holding its keys. Validators were advised to reject it, and an emergency server release marked it unsupported to prevent activation. No funds were lost because the feature never reached the main network.

Permission Delegation, which allows an institution to grant another account narrowly scoped authority without handing over full signing power, was disclosed as vulnerable in September 2025 and disabled. The bug allowed one account to charge transaction fees to another and potentially drain its balance. The ledger's documentation has listed both amendments as obsolete since, pending revised versions.

The other three proposals are new to the amendment pipeline.

Confidential MPT would add native privacy features for Multi-Purpose Tokens on the XRP Ledger. The proposal uses elliptic-curve encryption and zero-knowledge proofs to conceal token balances and transfer amounts from public view while allowing authorized verification by designated third parties such as auditors or regulators.

"For financial institutions, privacy is often a prerequisite for using public blockchain infrastructure," Cooper said. The feature could prove relevant to US-regulated institutions evaluating public blockchains for tokenized assets, where banks, broker-dealers and asset managers often need transaction confidentiality while retaining records that can be reviewed.

Fees and Reserves addresses a longstanding onboarding barrier by allowing a bank, issuer, or platform to cover transaction fees and account reserves for users. "Users continue to own their accounts and keys, while removing one of the biggest onboarding hurdles: requiring every participant to acquire and manage XRP before they can interact with the network," Cooper explained.

Dynamic MPT would let issuers modify selected token properties after issuance, such as transfer fees and metadata, without requiring a full migration to a new token. The final amendment specifications will determine exactly which properties can be changed.

The proposed features arrive as the XRP Ledger records increased tokenized real-world asset activity. Data from RWA.xyz showed the network added approximately $2.6 billion in RWA value during the six months through July 26, excluding stablecoins. That ranked the XRP Ledger second among tracked networks for net RWA inflows, behind BNB Chain at $3 billion and ahead of Stellar at roughly $2.1 billion. The network's combined distributed and represented RWA value reached approximately $4.38 billion.

Approval is not automatic. The lending protocol and single-asset vault amendments have each drawn roughly a third of validator support against the 80% threshold they need, and Batch already carries a record of being voted down. Validator operators will be able to review the amendments as their specifications become available, with activation depending on whether each proposal independently secures the required consensus after xrpld 3.3.0 is released.

Once added, BigGo Finance appears first in Google Top Stories, so you get the broadest, most up-to-the-minute, and most comprehensive global financial news first.