XRP's Security Fix Missed Today's Deadline at 77.14% — the Clock Restarted to November 4 While Lending Stays 10 Votes Short

The XRP Ledger was supposed to change its rules this morning. The amendment the calendar had pencilled in for 23 October at 09:34 UTC — fixCleanup3_4_0, the maintenance bundle that reached its supermajority on 9 October — did not hold that support to the end of the two-week window. Votes slipped back under the 80% bar, the ledger re-recorded the majority on 21 October at 14:46:22 UTC, and the countdown that decides activation now points at 4 November at the earliest.

The live evidence sits on XRPL's own documentation: the granular permission reference shows fixCleanup3_4_0 at 77.14%, open for voting, below the threshold, with its warning text still written in the present tense. For holders there is nothing to do — balances, addresses and payments already in flight stay as they are, there is no hard fork and no token swap. For node operators the deadline moved. For anyone who delegated the PaymentBurn permission since permission delegation went live on 8 October, the warning did not move at all.

The part of the patch that actually matters

This is not a feature release. It is a bundle of corrections shipped inside xrpld 3.4.0 on 17 September, and the one with teeth is a permission fix. Until it activates, a delegate holding the PaymentBurn granular permission can, in specific circumstances, mint new fungible tokens instead of burning them — XRPL's documentation states it plainly and tells operators not to grant that permission before the amendment is enabled. Permission delegation itself went live on 8 October. That is a live capability with a documented hole underneath it, and the repair has now slipped by at least twelve more days.

The rest of the bundle is plumbing with consequences: automated market maker transactions that could destroy LP tokens without returning the underlying assets to liquidity providers, single-asset vault withdrawal calculations, permissioned DEX invariants, MPToken authorization and NFT offer validation. None of it adds a feature. All of it changes how the network checks transactions once it is enabled.

Lending is a separate vote, and it is ten short

Two different things were being counted as one this week. fixCleanup3_4_0 contains corrections that mention vaults and loans; it is not a vote to switch lending on. In the 19 October snapshot, LendingProtocol held 19 validator votes against a 29-vote threshold — ten short — while SingleAssetVault was eight short. The rule that governs both is simple: more than 80% of trusted validators, held for two consecutive weeks, checked at flag ledgers roughly fifteen minutes apart. Fall below and the amendment is temporarily rejected and the fortnight restarts.

What arrives if the votes do: shared single-asset vaults, fixed-term loans arranged by a loan broker, closed-ended vaults and cash-basis accounting under LendingProtocolV1_1, the revision that shipped in the same 3.4.0 release with its default votes set to no. Code sitting on a server is not approval, and that is precisely the distinction October exposed. The broker posts first-loss capital into a separate pseudo-account so a default draws on that buffer before depositors do; it is a risk allocation, not an insurance policy from the network.

What the chain did while the vote stalled

Usage kept climbing regardless of the amendment calendar. Santiment counted a record 8.24 million non-empty XRP Ledger wallets, with 4,772 new wallets created in a single day — the fifth-largest daily reading since March.

Supply kept leaving venues. CryptoQuant's Arab Chain put 5.3 billion XRP off centralized exchanges over 30 days, including 2.206 billion from Binance, 501.51 million from OKX and 479.94 million from Bybit, with exchange balances reported at 1.6 billion tokens versus 3.76 billion previously — the lowest since 2018. The counterweight: analyst Darkfost measured the monthly average value of large XRP deposits to Binance at $112.4 million, the highest since March. Deposits are not sales, but they are the line that tests the withdrawal story if it breaks.

Swell opens Tuesday with the banks in the room

The other date on the calendar is 27 to 29 October, when Swell lands in New York for its tenth year and, for the first time, merges with Apex — the XRPL builder summit — and UBRI Connect. Ripple is billing it as 1,500 attendees, more than 80 sessions and 100-plus speakers across three stages.

The roster is the point: Brad Garlinghouse, CTO Emeritus David Schwartz, Bullish's Tom Farley, Robinhood's Johann Kerbrat, BNY's Laide Majiyagbe, ICE's Michael Blaugrund and TD Securities' Elizabeth St-Onge, alongside Matt Damon and Gary White of Water.org. Ripple says Swell is historically where it makes its most significant product and partnership announcements. That is a marketing claim until Tuesday, and it is the only scheduled catalyst between now and the restarted amendment window.

The ETF plumbing is not leaning the same way as the price. US spot XRP funds took in roughly $709,000 on Wednesday and $3.55 million on Thursday, all of Thursday's money in Franklin Templeton's XRPZ, after a $1.84 million weekly outflow ended a 13-week inflow streak. Cumulative net inflows sit near $1.8 billion, with net assets near $1.49 billion — about 1.01% of market capitalisation.

The levels that decide the next two weeks

XRP traded at $1.3087 on Friday, up 0.08% in 24 hours inside a $1.2954 to $1.3307 range, with a market value near $83 billion and roughly 18% given back from October's $1.60 highs. The 100-day EMA sits above the price near $1.34, the 50- and 200-day EMAs form a $1.37 to $1.38 ceiling, the daily RSI is around 42 and the MACD is still negative with a narrowing histogram.

That makes $1.30 the floor and $1.40 the door. Hold $1.30 and a decisive reclaim of $1.40 reopens $1.50, which is where the recovery case lives. Lose $1.30 on a daily close and $1.2461 comes first, then $1.20. Until one of those resolves, the path of least resistance is sideways with a downward tilt, and no number of validator votes changes that arithmetic on its own.

What to watch before 4 November

Three things, in order. Whether fixCleanup3_4_0 keeps more than 80% of trusted validators continuously through the restarted window — the count is public and it moves. Whether LendingProtocol finds the ten votes it is missing, because a credit market with no activation date is a roadmap item, not a feature. And whether Swell turns a room full of banks into something measurable, since the last two weeks proved that adoption headlines and token prices do not share a schedule.