XRPL Restricted Tokens Get Four Proposed Gap Fixes

XRPL restricted tokens can still reach some accounts without a fresh issuer OK. XRP Ledger developers have put forward four code changes under fixCleanup3_5_0 to close those gaps. The work covers trust-line carve-outs, AMM pool tokens, and permission checks. The fixes still need code merges and validator support before they go live. That matters for XRP news readers who track issued assets on XRPL.

XRPL Restricted Tokens Face Four Approval Loopholes

The package is tracked in open rippled pull requests under fixCleanup3_5_0. It targets how XRPL enforces issuer-set permissions. Those rules let issuers choose which accounts can receive and hold their tokens. Issuers use them for stablecoins and tokenized funds that need tight control.

On XRPL, accounts open authorized trust lines to hold issued tokens. Issuers can require an OK before those lines turn on. Developers found paths that could still send locked tokens to accounts that lack that OK. The four fixes add stronger checks on those paths.

One change would require an issuer OK for both assets in an AMM pool before an account can take the pool's LPToken. That blocks a side door into locked assets through pool shares. Another change closes a carve-out for trust lines that already hold a balance. Those lines could keep taking locked tokens without a new OK.

The other changes tighten checks on more send paths. They also limit what balances without an OK can do. Under the plan, holders would mostly only send those tokens back to the issuer. Issuers could later approve the accounts and restore normal use.

Why the Gaps Matter for Big Issuers

The plan matters most for firms that issue tightly controlled assets on the XRP Ledger. Stablecoin teams and tokenized fund desks often need eligibility checks before buyers can hold their products. Tokenized funds may limit ownership to verified investors. Gaps in payments or pool flows can weaken those controls.

Readers who follow tokenized funds on XRPL already know why permission rails matter. If locked units can move through AMM shares or old trust lines, issuer rules lose force. Closing those paths keeps the ledger's real flows in line with the design.

The XRP Ledger Foundation called the work routine hardening, not a response to a live exploit. It said it has no proof that outsiders used the gaps. Foundation lead Hussein "Vet" Zangana said known balances without an OK came from issuers themselves or from accounts they had already approved.

fixCleanup3_5_0 Still Needs Validator Support

The four fixes are still open and are not yet in XRPL's main software. An earlier amendment placeholder for fixCleanup3_5_0 is already in the tree. The network still cannot turn the cleanup on until the linked fixes land and validators back them.

Once the changes ship in the main software, fixCleanup3_5_0 must win support from more than 80% of trusted validators. That support must hold for two straight weeks before it turns on. The package also follows earlier work on locked-token rules around NFT flows. An August 2025 change closed a separate gap there.

For now, the upgrade is one more step to harden XRPL permission rails as controlled assets grow on the ledger. Go-live still depends on the code landing and sustained validator support.