XRP Ledger Activates Permission Delegation After Validator Vote

The XRP Ledger activated its PermissionDelegationV1_1 upgrade on October 8, allowing account holders to assign specific tasks to other accounts without sharing their main security keys. The change followed a two-week validator approval process and introduced new controls for businesses managing digital assets. However, developers also warned about a separate permission issue that could allow unauthorized token creation under certain conditions.

According to XRPL Dashboard, the feature went live late Thursday after meeting the network's voting requirements. The amendment allows account owners to grant limited authority while maintaining control over their funds and account settings.

The upgrade follows an earlier delay in September when validator support fell below the required threshold. CoinDesk previously reported that the decline reset the amendment's activation countdown.

XRP Ledger Secures Validator Approval for Upgrade

The XRP Ledger requires more than 80% support from trusted validators for 14 consecutive days before activating an amendment. With 35 validators on its current trusted list, at least 29 must approve a proposed change.

PermissionDelegationV1_1 had secured 30 votes during its latest reported approval period. The renewed majority began on September 24 at approximately 21:25 UTC, setting October 8 as the earliest activation date.

Meanwhile, the network processes amendment decisions through special flag ledgers, which occur roughly every 16.5 minutes. As a result, meeting the approval deadline does not immediately activate a feature.

The upgrade introduces a way to divide account responsibilities without exposing the main signing keys. Each authorized account can receive up to 10 permissions covering specific operations. These controls restrict which actions another account can perform. However, they do not automatically establish spending limits.

Read More: XRP, XLM Outlook: Derivatives Data Signals Caution as Price Momentum Weakens

Businesses often require continuous access to signing keys for routine transactions. Keeping powerful keys on internet-connected systems can increase potential losses if attackers compromise those systems.

With delegation, companies can assign routine duties to separate accounts while keeping their main keys offline. Each authorized account uses its own keys and operates within the permissions its owner grants.

For example, a stablecoin issuer could authorize a compliance account to approve customers without granting broader account control. The primary account holder can later modify or revoke those permissions.

Banks already separate payment processing and compliance responsibilities among employees. The XRPL upgrade introduces similar divisions directly into blockchain account permissions.

Developers Address Token Risk and Validator Voting Bug

Despite the activation, official XRPL guidance warns users against delegating the PaymentBurn permission until a separate fix takes effect. PaymentBurn normally allows an authorized account to destroy issued tokens. Under certain conditions, however, the current implementation can also permit that account to create new tokens.

The issue concerns assets issued on the XRP Ledger rather than the creation of new XRP. Other granular permissions remain unaffected by the warning. On Friday, the proposed PaymentBurn fix had secured 27 votes from 35 trusted validators. It needed two additional votes to reach the 29-vote threshold and begin its two-week approval period.

Separately, an October 8 report identified a problem affecting how certain XRPL servers count validator votes. Some servers may stop counting validators after routine security-key changes, even when those validators remain active.

For instance, losing track of two validators would reduce a server's count from 35 to 33. This could distort its view of amendment support.

Developers have proposed using permanent validator identifiers to address the problem. The patch remains under review.

The changes come as institutional activity expands across the network. According to Evernorth data shared with CoinDesk, XRPL averaged USD 3.72 billion in tokenized assets and USD 539 million in RLUSD during the second quarter.

Together, those reported balances reached approximately USD 4.26 billion, providing context for the network's growing account management requirements.

Final Thoughts

The XRP Ledger's PermissionDelegationV1_1 activation introduces new account controls after completing its validator approval process. Businesses can now assign limited operational duties without exposing their primary keys. Meanwhile, developers continue addressing the PaymentBurn permission risk and a separate validator-counting issue, with both fixes still awaiting further progress.