XRP Ledger fixes PaymentBurn flaw that allowed unintended token creation

An amendment to the XRP Ledger, activated on November 4, removes an unintended feature in the PaymentBurn permission that previously allowed certain delegates to mint tokens, not just destroy them. The fix, called fixCleanup3_4_0, was approved and went live in ledger 108,112,129 at 14:52 UTC, as recorded by amendment tracker XRPLWin. fixCleanup3_4_0 shipped with xrpld 3.4.0, the latest version of the XRP Ledger’s codebase, released on September 17. The change specifically targets the PaymentBurn permission, which lets one XRPL account delegate the burning of its issued tokens to another account. Until now, the XRP Ledger’s documentation acknowledged that this delegated power could, under certain circumstances, also enable the delegate to create new fungible tokens—even though the permission was intended solely for burning assets.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CoinTurk News.