An $XRP Ledger account could soon let another account make payments or approve customers on its behalf without handing over the keys that control everything else.
The feature, called PermissionDelegationV1_1, entered a 14-day activation countdown on Sept. 21 after 29 of the network’s 35 trusted validators backed it. It could go live on Oct. 5 at 11:18 UTC if support remains at or above 80% throughout the period, according to the live amendment dashboard.
At least 28 validators must continue supporting it. Any drop below that level resets the clock.
The upgrade lets an account divide its authority by job. A stablecoin issuer could allow an internet-connected compliance system to approve customer accounts to hold its token while keeping the keys with full control offline.
A separate operations account could receive permission to make payments without gaining the power to change those keys or grant authority to somebody else. Each delegate can receive as many as 10 permissions, which the main account can later change or revoke, according to XRPL documentation.
PermissionDelegationV1_1 is the network’s second attempt at introducing the feature.
The original version contained a flaw that could let an attacker make another account pay fees for transactions it had not properly signed. Repeated submissions carrying deliberately high fees could have drained the victim’s $XRP balance.
The software checked whether an account had permission to carry out the transaction before verifying its signature. Certain failures still charged a fee, meaning the money could be deducted before the system discovered that the signature was invalid, according to an XRPL vulnerability report.
The flaw was reported by a community tester on Sept. 15, 2025, while the feature was being tested outside the main network. Validators were advised to reject the amendment, and it never activated.
Read More: $XRP Ledger upgrade brings back features once pulled over critical bugs
The replacement ships in xrpld 3.3.0, the server software used to operate $XRP Ledger nodes. The repair changes how an unauthorized transaction is rejected so it cannot charge a fee before its signature has been verified.