What to Know
- The XRP Ledger’s xrpld 3.3.0 release is expected next week with five proposed amendments for validators to consider.
- The package includes Confidential MPT, Batch, Permission Delegation, Sponsored Fees and Reserves, and Dynamic MPT.
- Batch and Permission Delegation are revised versions of features previously withdrawn after serious security flaws were found.
- Batch is designed to let up to eight transactions across different accounts execute atomically, meaning all succeed together or none execute.
- Permission Delegation would let institutions grant narrowly scoped signing authority without exposing full account control.
- Confidential MPT is aimed at private tokenized-asset activity using zero-knowledge proofs and elliptic-curve encryption.
- Sponsored Fees and Reserves would let a bank or platform cover another account’s XRP fees and reserve requirement.
- Dynamic MPT would let issuers define which token properties may be changed later without requiring a full migration.
- Amendments require at least 80% support from trusted validators for two consecutive weeks before taking effect.
- Approval is not guaranteed, as prior amendment votes have shown uneven validator support and Batch has previously failed the process.
XRP Ledger Upgrade Moves Toward Validator Review
The XRP Ledger is preparing for a significant protocol update as the expected xrpld 3.3.0 release brings five amendments into focus for validators. The release is notable not only for its emphasis on tokenized assets and institutional usability, but also because it revives two features that were previously pulled after security researchers identified flaws serious enough to require urgent network-level caution.
The proposed amendments are Confidential MPT, Batch, Permission Delegation, Sponsored Fees and Reserves, and Dynamic MPT. Together, they point toward a broader effort to make the XRP Ledger more useful for tokenized assets, enterprise workflows, private transfers, sponsored onboarding, and flexible token administration. However, none of the changes activate simply because they appear in a software release. The network’s amendment process requires validators to approve protocol changes before they become part of the live ledger.
Under that process, an amendment must gain at least 80% support from trusted validators for two consecutive weeks. The threshold is designed to ensure that major protocol changes are not decided unilaterally by any single company or developer group, but instead move forward only when the validator set shows sustained support. That framework is especially relevant for this release because two of the proposals have already been through the process before and did not make it to activation.
Batch Returns After a Serious Signature Validation Flaw
Batch is one of the most closely watched amendments in the expected xrpld 3.3.0 release because it attempts to solve a practical transaction coordination problem. The feature would allow up to eight transactions across different accounts to execute together as a single atomic operation. In plain terms, that means every transaction in the batch succeeds, or none of them does. This kind of design can be useful in complex financial workflows where partial execution could create operational risk.
For trading, settlement, and tokenized-asset use cases, atomic execution can help reduce uncertainty. If multiple accounts need to move assets, post collateral, update positions, or complete related steps at once, a batch transaction structure can provide cleaner execution. That is why the feature has drawn attention from technical traders, developers, and market participants watching XRP Ledger infrastructure.
Yet Batch also carries history. It reached its voting phase in February before security researcher Pranamya Keshkamat and the firm Cantina found a flaw in how the amendment validated signatures. The issue could have allowed an attacker to execute transactions from any account without holding that account’s keys. Validators were advised to reject the feature, and an emergency server release marked it unsupported to prevent activation.
No funds were lost because the flawed version never reached the main network. Still, the episode demonstrated why validator review, independent research, and emergency release mechanisms matter in blockchain governance. A feature intended to improve transaction flexibility could have introduced a severe security risk if it had gone live without correction. The revised version now returns in a more cautious environment, where its technical benefits will likely be weighed against its prior failure.
Permission Delegation Seeks Safer Institutional Signing
Permission Delegation is the second returning feature in the xrpld 3.3.0 package. The proposal is built around a common institutional need: allowing another account or system to perform specific actions without granting full signing power. For banks, platforms, custodians, and other regulated entities, narrowly scoped authority can support safer operations, internal controls, and delegated workflows.
Rather than exposing full account control, Permission Delegation would let an institution grant limited authority for defined functions. That can be valuable when different business units, automated systems, or service providers need to interact with ledger accounts. Properly designed delegation can reduce key-management risk by avoiding unnecessary access to high-privilege credentials.
The previous version, however, was disclosed as vulnerable in September 2025 and disabled. The bug allowed one account to charge transaction fees to another and potentially drain its balance. Since then, the ledger’s documentation has listed both Batch and Permission Delegation as obsolete, with revised versions expected to replace them.
The return of Permission Delegation therefore carries two separate implications. On one hand, it shows continued demand for enterprise-grade account permissioning on the XRP Ledger. On the other hand, it highlights that seemingly narrow permission features can produce serious consequences if fee logic, account authority, or signing boundaries are not carefully enforced.
New Amendments Target Privacy, Fees, and Token Flexibility
The other three amendments in the expected release are new: Confidential MPT, Sponsored Fees and Reserves, and Dynamic MPT. Each is tied to the XRP Ledger’s push into tokenized assets and institutional activity, but they address different barriers that may affect adoption.
Confidential MPT is designed to bring privacy to Multi-Purpose Tokens. It combines zero-knowledge proofs with elliptic-curve encryption so balances and transfer amounts can remain private while auditors or regulators can still verify information when required. For tokenized assets, this distinction is important. Public blockchains can provide transparency, but many financial institutions cannot expose every balance, flow, or transaction amount to public view.
Zero-knowledge proofs allow a party to prove that a statement is true without revealing the underlying data. In a tokenized-asset setting, that can support compliance and verification without forcing sensitive transaction details into the open. Elliptic-curve encryption adds a cryptographic layer intended to protect the underlying balance and transfer information. The result, if adopted, would be a privacy-oriented path for Multi-Purpose Tokens on the XRP Ledger.
Sponsored Fees and Reserves addresses a different challenge: onboarding and user friction. On the XRP Ledger, users generally need XRP for transaction fees and reserve requirements. For institutions building customer-facing products, that requirement can complicate adoption because every user may need to acquire XRP before transacting. Sponsored Fees and Reserves would let a bank or platform cover another account’s XRP costs, removing that step from the user experience.
Dynamic MPT focuses on token administration. It would let an issuer specify at creation which token properties can be changed later. That matters because token issuers may need to update fees, metadata, or similar parameters over time. Without flexible design, an issuer could be forced into a full migration to a new token when changes are needed. Dynamic MPT aims to reduce that operational burden while still defining changeable properties from the start.
Validator Approval Remains the Key Test
The expected xrpld 3.3.0 release marks a shift from where the ledger stood in mid-July. At that point, all five amendments were still in development on the XRP Ledger’s amendment tracker, while validators could vote on a separate set of bug-fix bundles covering the lending protocol, single-asset vaults, the permissioned exchange, and multi-purpose tokens.
Even with the release expected next week, activation is not automatic. Validators must decide whether the proposed changes are ready for the network. The 80% threshold for two consecutive weeks creates a deliberate waiting period, giving validators and the broader technical community time to evaluate implementation quality, security implications, and operational readiness.
Recent validator behavior suggests that approval should not be assumed. The lending protocol and single-asset vault amendments have each drawn roughly a third of validator support against the 80% required. Batch also carries the baggage of having already been voted down after its prior flaw emerged. That history may make validators more cautious, even if revised code addresses the earlier vulnerabilities.
For XRP market watchers, the update is important because infrastructure development can affect long-term network utility. The amendments do not by themselves determine XRP’s market price, but they may influence how developers, institutions, and token issuers assess the ledger’s capabilities. Features for privacy, sponsored user costs, delegated authority, and atomic execution all relate to real-world financial workflows that blockchain networks are trying to support.
Institutional Utility Takes Center Stage
The common theme across the five amendments is institutional utility. Confidential MPT addresses the privacy expectations of tokenized-asset users. Sponsored Fees and Reserves targets onboarding friction. Permission Delegation speaks to controlled access and operational security. Batch offers coordinated execution across accounts. Dynamic MPT gives issuers more flexibility to manage token properties over time.
Those features align with the idea that the XRP Ledger has already demonstrated an ability to support tokenized assets and now needs tools that make those assets more practical in everyday financial activity. Global transfers, trading, collateral use, and settlement all require more than simple issuance. They require privacy controls, permission models, predictable execution, cost management, and adaptable token design.
Still, the most important question is whether validators believe the amendments are safe and mature enough for activation. The earlier problems with Batch and Permission Delegation show that ambitious protocol features can introduce risks at the account-security level. A flaw that affects signatures, fees, or delegated authority can directly threaten user balances if it reaches production.
That makes xrpld 3.3.0 a meaningful governance moment for the XRP Ledger. The release may offer a clearer path toward institutional-grade tokenized-asset infrastructure, but validators will ultimately decide whether these amendments earn enough support to become part of the network.
Frequently Asked Questions (FAQs)
What is xrpld 3.3.0?
xrpld 3.3.0 is the expected next XRP Ledger software release that will put five proposed amendments before validators. The amendments focus on tokenized assets, privacy, delegated permissions, sponsored costs, and more flexible token management.
Which amendments are included in the expected release?
The five amendments are Confidential MPT, Batch, Permission Delegation, Sponsored Fees and Reserves, and Dynamic MPT. Each proposal must still go through validator approval before it can take effect on the network.
Why is Batch important?
Batch would allow up to eight transactions across different accounts to execute atomically. That means all transactions in the batch would succeed together or none would execute, which can be useful for complex settlement and trading workflows.
Why was Batch previously pulled?
Batch was previously pulled after a flaw was found in how it validated signatures. The flaw could have allowed an attacker to execute transactions from any account without holding its keys, but no funds were lost because the feature never reached the main network.
What does Permission Delegation do?
Permission Delegation would allow an institution to grant another account narrowly scoped signing authority without giving away full control. The goal is to support safer delegated workflows for institutions and platforms.
Why was Permission Delegation disabled before?
Permission Delegation was disclosed as vulnerable in September 2025 and disabled. The bug allowed one account to charge transaction fees to another and potentially drain its balance.
What is Confidential MPT?
Confidential MPT is a proposed feature for Multi-Purpose Tokens that uses zero-knowledge proofs and elliptic-curve encryption. It aims to keep balances and transfer amounts private while still allowing auditors or regulators to verify them when required.
How does Sponsored Fees and Reserves help users?
Sponsored Fees and Reserves would let a bank or platform cover another account’s XRP fees and reserve requirement. That could reduce onboarding friction by removing the need for every user to acquire XRP before transacting.
Are these XRP Ledger amendments guaranteed to activate?
No. Each amendment needs at least 80% support from trusted validators for two consecutive weeks. Approval is not automatic, and previous voting patterns show that validators may withhold support if they are not convinced a feature is ready.
Photo by Alesia Kozik on Pexels
