XRPL Fixes Permission Delegation After Critical Bug Found

XRPL has pulled its Permission Delegation amendment after a bug bounty report found a high-risk flaw during testing, with a hardened V1.1 now completing security review and QA checks.

The episode shows why delegation at the protocol level needs safeguards that extend beyond the basic feature itself.

XRPL Reworks Permission Delegation After Bug Report Permission Delegation, known as XLS-75, allows one account to give another account specific powers to act on its behalf. The permissions are meant to be narrow, rather than giving the delegate control over the entire account.

RippleX head of engineering J. Ayo Akinyele explained that the original V1.0 implementation was pulled after a vulnerability was reported through the bug bounty program before it reached the XRPL mainnet.