In the latest XRP Ledger (XRPL) development, RippleX is preparing to ship xrpld 3.3.0 during the week of August 1, 2026. The release packages five amendments for validator consideration, notably including rewritten versions of the Batch and Permission Delegation features. These two amendments were originally blocked before mainnet activation after critical authorization flaws were discovered—no funds were lost, but the question now is whether validators will trust the rewrites enough to clear the 80% approval threshold.
The original Batch amendment contained a signature-validation bug that allowed attackers to execute inner transactions from arbitrary victim accounts without private keys. Researcher Pranamya Keshkamat and Cantina AI’s tool Apex uncovered the flaw on February 19, 2026. An emergency rippled 3.1.1 release disabled both Batch and the related fixBatchInnerSigs amendments. The root cause was a loop-exit error in signer-validation logic—encountering a matching signing key caused early success, skipping verification of remaining signers. The exploit could drain a victim’s account down to its reserve. The replacement, BatchV1_1, redesigns the authorization logic and is now flagged in the 3.3.0 registry with a default No vote.
Permission Delegation had a separate flaw: an invalid offline-signed transaction could still charge the delegated account a fee before failing authorization, because the code checked permissions before verifying signatures. A malicious actor could repeatedly submit such transactions with elevated fees to silently bleed XRP. The fix reclassifies the error and reorders checks, so no fee is deducted before signature verification. The replacement, PermissionDelegationV1_1, also starts with a default No vote.
The remaining three amendments target institutional tokenization. Confidential MPT uses elliptic-curve cryptography and zero-knowledge proofs to keep Multi-Purpose Token balances and transfer amounts opaque on the public ledger while remaining auditable by designated entities, addressing privacy needs for tokenized bonds, real estate, equities, and private credit. Sponsored Fees and Reserves allow institutions to cover transaction fees and reserve requirements for users, removing the need to hold XRP—potentially shifting demand toward institutional settlement volume. Dynamic MPT lets issuers modify token properties, fees, and metadata post-issuance without migrating to a new token. RippleX’s head of product, Jazzi Cooper, stated these features complete the infrastructure layer for global transfers, trading, collateralization, and settlement, pending validator voting.
