$XRP Ledger Validators Prepare to Activate Critical Fix for Pre-Mainnet Flaw

The $XRP Ledger (XRPL) validators have put BatchV1_1 on a conditional path to activate at 14:06:41 UTC on Sept. 29, marking a significant step in fixing a critical pre-mainnet flaw.

The original Batch amendment never activated on the mainnet due to a critical authorization flaw discovered by researchers in February. The flaw allowed an attacker to place a valid signer first and then add a forged entry purporting to authorize a victim account, potentially executing the unchecked victim transaction without their keys.

XRPL's response came in two stages: version 3.1.1 marked the original Batch and fixBatchInnerSigs amendments unsupported, blocking their activation, while BatchV1_1 replaced them with a rewritten authorization path and additional defenses.

The XRPL Foundation's final XLS-56 specification now requires a multi-account batch to contain the exact set of BatchSigners whose authorization the inner transactions would ordinarily need. This change addresses both the disclosed premature-success bug and adjacent ways that malformed or replayed batch data could cross authorization boundaries.