XRP Ledger: Fixes the vulnerability of "only accounts authorized to destroy can create new tokens"

According to CoinDesk, the XRP Ledger activated a fix named fixCleanup3_4_0 at 22:52 Beijing time on November 4. This fix addressed a vulnerability: certain accounts that were originally only authorized to "burn" tokens issued by the issuer could, under specific conditions, also create new tokens. This vulnerability affected the network's permissioned delegation system, for example, stablecoin issuers could authorize payment processors to burn tokens when customers redeem them, but did not grant them the authority to create new tokens; under the old rules, accounts with limited burn permissions could mint tokens simultaneously.

The vulnerability affected assets issued on the XRP Ledger, including stablecoins, but did not impact XRP itself, and there are currently no publicly confirmed exploitation cases. This fix also included accounting corrections for the planned lending system and Single Asset Vaults, as well as corrections related to automatic trading pool token recovery, permissioned transactions, and transaction signatures. The activation was completed after two consecutive weeks of support following an interruption in validator support in October.