XRP Ledger Unlocks Delegated Keys for Banks, With One Permission Off-Limits
The XRP Ledger just switched on a feature that lets one account hand limited powers to another — without surrendering the keys that control the money.
PermissionDelegationV1_1 went live on Oct. 8, once the network's trusted validators cleared 80% support for two straight weeks. The upgrade had already stumbled once: its countdown reset in September when support slipped below that bar.
Why banks wanted this
Routine crypto operations need signing keys online all day. That is fine until the machine holding them gets compromised — then everything the key can reach is exposed. Delegation splits that authority by job. A stablecoin issuer could let a compliance team approve new customers while the keys to the main holdings stay offline.
The limits are the part people will skim past. Each delegated account can hold up to 10 permissions, and those permissions restrict the type of action — they do not impose a spending cap. A helper cleared to move funds can move any amount, not just a small slice.
What is riding on the ledger
The network averaged $3.72 billion in tokenized assets and $539 million in Ripple's RLUSD stablecoin during the second quarter — roughly $4.26 billion combined, according to a report from XRP treasury company Evernorth. Banks already split payment and compliance duties between staff. This upgrade makes those divisions enforceable on the ledger itself.
One permission to avoid
Official guidance says do not delegate PaymentBurn yet. The permission is meant to let a helper destroy tokens, but under certain conditions it also lets that helper create them. The warning covers tokens issued on the ledger, not newly minted XRP, and the other permissions are unaffected.
A fix for that flaw held 27 of 35 validator votes as of Friday. It needs 29 to start the two-week countdown that would clear the warning.
Why this matters to you
For anyone building on XRPL — stablecoin issuers, tokenized fund managers, DeFi and airdrop teams — this is plumbing for the regulated half of the business. Security rules that used to live in a policy document can now be enforced by the ledger itself. Just leave PaymentBurn alone until the fix clears the vote.