Four vulnerabilities took a whole year to patch 🦖
XRP Ledger developers submitted four code fixes this week
🚨 行情变了群里说
Bundled into a network upgrade called fixCleanup3_5_0
The goal is to plug a loophole that let people who hadn’t been approved by the issuer obtain tokens that should have been locked
First, let’s clarify what these tokens are
For regulated assets such as stablecoins and tokenized funds, issuers can set a gate
Anyone who wants to hold them must first pass identity checks, with approval records written to a trust line
The rule sounds strict, but several exception paths had remained open
The first exception was in automated market maker pools
A pool contains two tokens, but previously only one of them was checked for approval
Now both must be approved before anyone can buy a share of the pool
That’s because a pool share is itself a token, so bypassing the check is equivalent to indirectly holding a regulated asset
The second exception was more subtle
Approval checks used to apply only to trust lines with a zero balance
Once a line already held tokens, further deposits were no longer blocked
This update closes that loophole too
The other two changes are more fundamental
A unified check has been added to keep approval rules consistent across existing and future features
Another path is related to NFT trading, which was already fixed once in August 2025
This update takes care of the remaining edge cases
The XRPL Foundation put it cautiously ⚖️
Zangana, the community and product director, said this is developers discussing what the protocol should guarantee, not a report of users suffering losses
All known unapproved balances came from funds deposited by the issuers themselves or accounts they had previously approved
No outside party has been found exploiting the remaining exceptions
The threshold for the patch to take effect is high
It requires more than 80% of trusted validators to support it for two consecutive weeks
None of the four changes has been merged into the mainnet software yet
I think the significance of this is being underestimated
When people look at public blockchains, they tend to focus on throughput, fees, and the number of ecosystem projects
But institutions really ask just one question: who can hold my assets, and can I revoke that access?
Tokenized funds, stablecoins, and even tokenized stocks all represent regulated money
Issuers must be able to prove they can control the list of holders
Just one exception path could be enough for a compliance department to reject an entire chain
XRP is currently $1.26, down 2.9% in 24 hours
Bitcoin is $78,607, down 1.91%
Ethereum is $2,246, down 3.2%
As markets fall, these kinds of infrastructure fixes are all the more worth noting 🔍
Do you think tokenized assets should be available for anyone to hold by default, or should they require whitelisting?
Every day, I bring you the latest on XRP and crypto—not just what’s happening, but also the logic and opportunities behind the headlines 👀🚀
XRP Ledger developers submitted four code fixes this week
🚨 行情变了群里说
Bundled into a network upgrade called fixCleanup3_5_0
The goal is to plug a loophole that let people who hadn’t been approved by the issuer obtain tokens that should have been locked
First, let’s clarify what these tokens are
For regulated assets such as stablecoins and tokenized funds, issuers can set a gate
Anyone who wants to hold them must first pass identity checks, with approval records written to a trust line
The rule sounds strict, but several exception paths had remained open
The first exception was in automated market maker pools
A pool contains two tokens, but previously only one of them was checked for approval
Now both must be approved before anyone can buy a share of the pool
That’s because a pool share is itself a token, so bypassing the check is equivalent to indirectly holding a regulated asset
The second exception was more subtle
Approval checks used to apply only to trust lines with a zero balance
Once a line already held tokens, further deposits were no longer blocked
This update closes that loophole too
The other two changes are more fundamental
A unified check has been added to keep approval rules consistent across existing and future features
Another path is related to NFT trading, which was already fixed once in August 2025
This update takes care of the remaining edge cases
The XRPL Foundation put it cautiously ⚖️
Zangana, the community and product director, said this is developers discussing what the protocol should guarantee, not a report of users suffering losses
All known unapproved balances came from funds deposited by the issuers themselves or accounts they had previously approved
No outside party has been found exploiting the remaining exceptions
The threshold for the patch to take effect is high
It requires more than 80% of trusted validators to support it for two consecutive weeks
None of the four changes has been merged into the mainnet software yet
I think the significance of this is being underestimated
When people look at public blockchains, they tend to focus on throughput, fees, and the number of ecosystem projects
But institutions really ask just one question: who can hold my assets, and can I revoke that access?
Tokenized funds, stablecoins, and even tokenized stocks all represent regulated money
Issuers must be able to prove they can control the list of holders
Just one exception path could be enough for a compliance department to reject an entire chain
XRP is currently $1.26, down 2.9% in 24 hours
Bitcoin is $78,607, down 1.91%
Ethereum is $2,246, down 3.2%
As markets fall, these kinds of infrastructure fixes are all the more worth noting 🔍
Do you think tokenized assets should be available for anyone to hold by default, or should they require whitelisting?
Every day, I bring you the latest on XRP and crypto—not just what’s happening, but also the logic and opportunities behind the headlines 👀🚀
