The XRP Ledger's PermissionDelegationV1_1 upgrade has entered its 14-day activation countdown after securing support from 29 of the network's 35 trusted validators, clearing the final hurdle before the feature can go live on Oct. 5.
The amendment enables accounts to delegate specific duties—such as processing payments or approving customers—to other accounts without surrendering full control of their keys. A stablecoin issuer, for example, could allow an internet-connected compliance system to approve token holders while keeping master keys offline, and grant a separate operations account the ability to execute payments without the power to alter those keys or reassign authority.
Under XRPL documentation, each delegated account can hold up to 10 permissions, all revocable or modifiable by the primary account holder.
This marks the second attempt to introduce the feature. The original version contained a critical flaw reported by a community tester on Sept. 15, 2025, during testnet trials: the software validated whether an account had permission to carry out a transaction only after the signature check, meaning certain rejected submissions still deducted fees before the invalid signature was discovered. Attackers exploiting this sequence could have drained XRP balances through repeated high-fee transactions on unauthorized trades.
Validators were advised to reject the amendment after the vulnerability was disclosed, and the feature never activated on the main network.
The revised patch ships in xrpld 3.3.0, the server software operating XRP Ledger nodes. It reorders the validation logic so unauthorized transactions are rejected and zeroed before any fee is charged.
According to the live amendment dashboard, the feature will activate on Oct. 5 at 11:18 UTC if validator support remains at or above 80% throughout the countdown. Any drop below 28 supporting validators resets the 14-day window.
