XRP Ledger Races to Shut Its Own Token-Minting Back Door

The XRP Ledger’s PermissionDelegationV11 feature went live on Mainnet on October 8, but a flaw in its PaymentBurn permission could let a delegated payment pass a zero balance and issue new trust-line tokens or multipurpose tokens in some circumstances. The fix, amendment fixCleanup340, rejects burn-only delegated payments that would cross into minting unless the delegate also holds PaymentMint; it needs 29 of 35 trusted validators to hold support for two uninterrupted weeks. On November 2, 33 of 35 backed it, with the earliest activation window opening November 4 around 14:46 UTC if support remained. XRPL documentation advised account holders not to delegate PaymentBurn until the amendment is enabled on Mainnet.