XRP Ledger deploys 4 new protections to fix manifest flood

The XRP Ledger Foundation shipped a security upgrade on Aug. 1 adding four protections against a manifest flood that affected nodes on July 31, according to a post on X.

"The XRP Ledger just got better in a flip of the switch moment," Hussein Zangana, community director at the XRP Ledger Foundation, said on X, confirming the fixCleanup3_2_0 amendment went live July 28 with support from 30 of 35 validators.

The new protections reject unusually large manifests, limit incoming manifest batches, cap bulk manifest data shared with new peers, and prevent nodes from storing manifests from more than 100 unknown validator keys. Unknown validator manifests will no longer be saved to disk, so flood data clears after a node restart. Ledgers continued to close normally throughout the incident, and the team has not yet disclosed the root cause.

The upgrade makes XRPL 3.2.0 the new minimum supported version for the mainnet. XRPScan warned that nodes running version 3.1.0 or earlier could be blocked from the network until they upgrade, potentially disrupting consensus participation. The fix follows Ripple's March announcement of an AI-supported red team to continuously probe XRP Ledger vulnerabilities.

Five amendments head to validators

Jazzi Cooper, head of product at RippleX, said xrpld 3.3.0 is expected next week carrying five proposed amendments: Confidential MPT, Batch, Permission Delegation, Sponsored Fees and Reserves, and Dynamic MPT. Each requires 80 percent validator support for two consecutive weeks to activate.

Batch and Permission Delegation are revised versions of features previously pulled from the network. Batch, which lets up to eight cross-account transactions execute atomically, was withdrawn in February after security researcher Pranamya Keshkamat and Cantina found a signature validation flaw that could allow unauthorized transactions. Permission Delegation, which lets institutions grant narrowly scoped signing authority, was disabled in September 2025 after a bug allowed one account to charge fees to another.

Sponsored Fees and Reserves would let banks or platforms cover users' XRP fees and reserve requirements, removing the need for every participant to acquire XRP before transacting. Every account currently locks up 1 XRP, with each trustline locking an additional 0.2 XRP. Confidential MPT combines zero-knowledge proofs with elliptic-curve encryption to keep Multi-Purpose Token balances private while auditors can still verify them. Dynamic MPT lets issuers specify which token properties can be changed later.

XRP trades near $1.06

XRP traded near $1.06, down 1.3 percent on the day and about 64 percent lower than a year ago, with a market cap of $66.5 billion. Upbit began supporting deposits and withdrawals of XRP Ledger-based RLUSD, with trading pairs in KRW, BTC and USDT.

The upgrades focus on strengthening stability and validation of existing features rather than adding new ones. Near-term attention centers on whether node operators complete upgrades and whether XRP Ledger-based services maintain continuity, rather than immediate price moves. The lending protocol and single-asset vault amendments have each drawn roughly a third of validator support against the 80 percent threshold they need, suggesting approval is not automatic. Permissioned Domains, by comparison, went live in February with more than 91 percent validator support.

This article is for informational purposes only and does not constitute investment advice.