727 FinancePANews October 30 news, according to CoinDesk, XRP Ledger developers have proposed four fixes aimed at closing exceptions that allow restricted tokens to enter accounts without issuer approval, and the related changes have been consolidated into the network upgrade fixCleanup3_5_0, which has not yet been activated on the mainnet. Some restricted tokens on the XRP Ledger require the issuer's prior approval before an account can hold them, but developers found that several ways to bypass approval still exist. The fixes include: before buying into an automated market maker pool, both tokens in the pool must be approved; and fixing the issue where the approval check is triggered only on zero-balance trust lines, causing trust lines that already hold tokens to continue receiving more tokens.
The XRP Ledger Foundation stated that this is routine protocol hardening, not a security incident, and that there are currently no reports of affected users. All existing unapproved balances come from issuers or accounts they previously approved, and no external parties have been found exploiting the remaining exceptions to create balances. After the fixes take effect, unapproved restricted tokens can only be returned to the issuer, and the issuer can approve the holder's trust line at any time to restore use. The four changes have not yet been merged into the main software; after merging, activation requires more than 80% of trusted validators to support them for two consecutive weeks.