The XRP Ledger is set to receive its xrpld 3.3.0 software release the week of August 1, reintroducing two protocol features that developers pulled after security researchers found bugs serious enough to put user funds at risk.
Jazzi Cooper, head of product at RippleX, announced the release on X on July 31. The update packages five proposed amendments together, each requiring 80% validator approval sustained over two consecutive weeks before activating on the live network.
What Went Wrong the First Time
The Batch amendment, which allows up to eight cross-account transactions to execute atomically, was withdrawn in February after security researcher Pranamya Keshkamat and the firm Cantina identified an issue with the code.
A flaw in how the amendment validated signatures that would have let an attacker execute transactions from any account without holding its keys.
Validators rejected the feature and an emergency release marked it unsupported. Permission Delegation suffered a similar fate in September 2025, when a separate vulnerability was found that could let one account charge transaction fees to another and potentially drain its balance. That feature was disabled and listed as obsolete until now.
Three New Additions
Alongside the revived features, xrpld 3.3.0 introduces three new amendments. Confidential MPT combines zero-knowledge proofs with elliptic-curve encryption to keep token balances and transfer amounts private while still allowing regulators to verify activity. Sponsored Fees and Reserves lets banks or platforms cover another account's transaction fees and reserve requirements, potentially lowering the barrier for institutional users. Dynamic MPT allows token issuers to specify in advance which properties can be changed later, avoiding full migrations when updating fees or metadata.
Both previously withdrawn features have undergone additional review since their bugs were identified, and their reinclusion suggests the XRP Ledger development team considers the underlying vulnerabilities resolved.
