XRP Ledger Closes Bug That Could Push Accounts Into Debt

Validators enabled amendment fixCleanup340 on November 4 at 14:52 UTC, in validated ledger 108,112,129, closing a flaw that could let a delegate holding only PaymentBurn redeem more than an account held. Delegation under the PermissionDelegationV11 amendment had run since October 8, and XRPL documentation advised against delegating PaymentBurn until the fix. The new code compares a delegated payment with the account’s actual balance and rejects amounts above it. Under the old rules, an oversized payment could create the delegating account’s own IOUs if an issuer had opened a trust line accepting them. The amendment does not let permissions be limited by currency.