Crypto World
XRP Ledger 3.4.0 adds lending and protocol fixes
XRP Ledger developers have released xrpld version 3.4.0 on Sept. 16, adding two amendment packages that revise proposed native lending functions and harden several transaction paths while asking server operators to upgrade.
Summary
- XRPL version 3.4.0 introduces two amendments covering lending changes plus a bundled protocol-fix package now.
- LendingProtocolV1_1 adds closed-ended vaults and cash-basis accounting, but mainnet activation still requires sustained validator consensus.
- Server operators are urged to upgrade quickly as XRPL Foundation now distributes signed Linux packages.
- fixCleanup3_4_0 hardens vaults, AMMs, MPTs, escrow, signing, credentials, and permissioned trading behavior across transaction paths.
- The new lending amendment depends on XLS-65 and XLS-66, which remain below activation thresholds.
XRPL’s official release says version 3.4.0 introduces LendingProtocolV1_1 and fixCleanup3_4_0, while retiring fixAMMOverflowOffer after its post-amendment behavior became a permanent part of the protocol.
The software release does not mean either new amendment is active on mainnet. XRPL’s amendment process requires a proposal to receive more than 80% support from trusted validators continuously for two weeks before its rules become active.
Lending V1.1 adds closed-ended vaults and cash accounting
XRPL’s 3.4.0 release says LendingProtocolV1_1 changes the design of Single Asset Vaults and the Lending Protocol by introducing closed-ended vaults with defined subscription, investment and redemption periods.
Ripple’s technical documentation says depositors can add or withdraw assets during the subscription phase. During the investment period, deposits and withdrawals stop while assets can fund loans. Redemption begins once the investment period ends, allowing depositors to recover their share after loans mature.
Once LendingProtocolV1_1 becomes active, XRPL’s documentation says new loan brokers can only be attached to closed-ended vaults. Existing loan relationships created under earlier rules receive separate handling so outstanding positions can continue to be managed.
The accounting model changes at the same time. Ripple’s documentation says new vaults would recognize interest only when borrowers actually make payments.
Under the earlier model, all scheduled interest was recognized when a loan originated. Cash-basis accounting leaves unpaid future interest outside vault income until payment arrives, affecting AssetsTotal, loan debt calculations and the accounting treatment of defaults.
The V1.1 rules would not retroactively convert older vaults. Ripple’s documentation says vaults created under the previous accounting method retain that model after V1.1 activation.
As earlier amendment coverage reported, Ripple’s validator had already voted for the underlying SingleAssetVault and LendingProtocol proposals in August, but validator approval remained well below the level required for mainnet activation.
XRPL 3.4.0 packages a large set of transaction fixes
The second amendment, fixCleanup3_4_0, contains fixes covering lending, vaults, Automated Market Makers, Multi-Purpose Tokens, NFTs, escrow, permissioned trading and account authorization.
The official release says one change prevents AMMClawback from burning a holder’s liquidity-provider tokens while recovering zero underlying assets when MPT rounding reduces the calculated recovery amount to zero.
Another fix strengthens MPT invariants. XRPL developers said the ValidMPTBalanceChanges and ValidMPTTransfer checks, which previously generated logs, are enforced under the amendment and continue to apply when transactions fail.
For Single Asset Vaults, the release lists precision and rounding changes across deposits, withdrawals and clawbacks. The rules are designed to keep recorded assets, available assets and outstanding share supply aligned when conversions reach precision boundaries.
Permissioned trading receives several corrections. The package excludes deleted domain offers from one Permissioned DEX invariant, tightens domain checks and corrects how expired credentials are removed when OfferCreate or Payment transactions run.
Signing behavior receives a separate safeguard. The release says version 3.4.0 assigns different signing hash prefixes to counterparty and sponsor signatures so a signature created for one role cannot be replayed as the other.
The release contains lower-level node hardening outside the amendment package. Developers fixed an unbounded database seek through TMGetLedger, capped the size of incoming TMTransactions lists and introduced a fee for transactions that cannot be deserialized.
XRPL developers said version 3.4.0 incorporates phase-one fixes arising from MPT and DEX audit and attackathon findings. The release does not identify those fixes as evidence of an active exploit on mainnet.
In previous upgrade coverage, version 3.3.0 had already introduced code for several separate proposals, including corrected Batch functionality, sponsored fees and confidential MPT transfers, with validator approval still required before activation.
Validator approval still separates release from activation
XRPL’s official amendment rules state that installing software containing an amendment only gives a server the code needed to understand the proposed rules. Validators separately choose whether to vote for activation.
The current XRPLF feature code lists both LendingProtocolV1_1 and fixCleanup3_4_0 as supported while retaining DefaultNo voting behavior. A default-no setting means running the software does not itself cast an affirmative amendment vote when an operator has not configured another choice.
The underlying lending components remain short of activation. A Sept. 17 snapshot based on XRPL Foundation validator-history data showed 16 of 35 trusted validators supporting SingleAssetVault and 13 of 35 supporting LendingProtocol.
Those counts are time-sensitive and come from an independent network tracker, not a fixed figure published in the release notes. The official rule remains more than 80% support maintained for two continuous weeks.
The new V1.1 amendment depends on the underlying lending architecture. The current XLS-66 specification describes fixed-term, uncollateralized lending using funds pooled through Single Asset Vaults, while borrower underwriting and credit-risk assessment remain off-chain.
The same specification remains classified as Draft. No source reviewed for this update showed a mainnet loan executed through the proposed native protocol or an activation date for LendingProtocolV1_1.
Node operators now receive packages from XRPL Foundation
Version 3.4.0 changes the distribution path for Linux server packages. The official release says Debian and RPM packages are now hosted through packages.xrplf.org and signed with an XRPL Foundation key.
XRPL developers urged server operators to install 3.4.0 “as soon as possible” to maintain service continuity. The published DEB and RPM files include SHA-256 checksums so operators can verify downloaded packages before installation.
GitHub now lists 3.4.0 as the latest immutable xrpld release, tied to commit 4a4fded2eba11427c48ce3f24d9c1aea5e7a9d17. The repository says the release tag and version commit carry verified signatures.
The same release retires fixAMMOverflowOffer. Under XRPL’s amendment model, retirement does not reverse the fix. It removes obsolete pre-amendment behavior after the new rules have become established as permanent protocol behavior.
Client support and security review are still developing
Application libraries are moving alongside the server release. XRPLF’s JavaScript client history lists LendingProtocolV1_1 support under the unreleased section following xrpl.js 5.2.0, which shipped on Sept. 11.
The binary-codec history shows version 2.11.0 already contains the role-specific sponsor and counterparty signing prefixes used by fixCleanup3_4_0, along with protocol definitions generated from xrpld 3.4.0.
Security testing of the lending work has continued separately from validator voting. Sherlock said in an Aug. 27 review that Ripple had started an AI-only examination of Lending Protocol V1.1 through its Audit Engine.
Sherlock said it would publish more information after the review finished, but no final V1.1 findings were located in its public materials checked for this report. Earlier testing covered a previous version of the lending system; prior independent audit coverage reported that Halborn’s earlier re-audit found no critical or high-risk issues while identifying one medium, two low and two informational findings.
Crypto World
Ethereum developers warn ‘any teenager’ could disrupt upcoming Glamsterdam test
Such an attack would not endanger mainnet funds. Any potential attack would only target “Sepolia,” where test ether has no meaningful cost, but could leave blocks without transaction payloads and derail the infrastructure testing needed before Glamsterdam reaches Ethereum itself.
What is Glamsterdam?
Glamsterdam is Ethereum’s next major upgrade, designed to fit more activity into each block without overwhelming the computers that verify it. Together with changes to gas pricing, the upgrade is intended to support a block gas limit of about 200 million, creating room for more payments and trades before users begin bidding fees higher.
The upgrade moves the relationship between validators and specialized block builders into Ethereum’s protocol. Builders assemble transaction blocks and compete to supply them. Once a validator accepts the winning bid, the builder is expected to reveal the underlying transactions.
And that process becomes easy to abuse on a free test network. A malicious operator can submit bids far above every legitimate builder, win repeatedly and then withhold the promised payload.
Developers said existing safeguards typically fall back to locally built blocks only after several payloads go missing.
Potuz added that clients also need to identify and reject individual builders so an attacker cannot return under a new identity and continue winning.
Crypto World
Corporate treasuries bought just 5,900 bitcoin (BTC) in 3 months
“Corporate treasuries were a big buyer through 2025, and they have stepped back,” Glassnode said. “Their average entry, the Corporate Treasury Cost Basis, sits at $80.5K, about 6% above spot, so the group as a whole is under water.”
Bitcoin topped that level recently but failed to keep gains.

Data source Bitcoin Treasuries now puts public-company holdings at about 1.22 million BTC across 181 listed firms. Strategy remains the dominant buyer and holder, with about 845,050 BTC. Tokyo-listed Metaplanet is among the next-largest corporate stacks. As a group, those treasuries are still underwater at current prices.
“A reclaim of $80.5K would put the treasuries back in profit and remove one layer of overhead supply; until then their entry is one more ceiling,” Glassnode added.
Other demand indicators paint a mixed picture
U.S.-listed spot bitcoin ETFs have attracted billions of dollars since early August, signaling a rebound in institutional demand for the cryptocurrency. However, they remain roughly $1 billion short of turning positive on a year-to-date basis, according to data source SoSoValue.
The Coinbase premium indicator has remained mostly negative since May, aside from a brief move into positive territory on Sept. 5, according to data from CoinGlass. A negative reading means bitcoin is trading at a discount on Coinbase relative to prices on offshore exchange Binance, suggesting that U.S. buyers are showing weaker demand than traders elsewhere.
Crypto World
Devon Rodriguez

Crypto World
Jennifer Rubio

Crypto World
Cardano Developer Warns Over AI YouTube Crypto Scam
Cointelegraph is committed to providing independent, high-quality journalism across the crypto, blockchain, AI, and fintech industries.
All news, reviews, and analyses are produced with full journalistic independence and integrity. For more details on our standards and processes, please read our Editorial Policy.
Crypto World
Why Is the BoE Holding Rates While the US Fed Hikes?
The Bank of England (BoE) is holding its rate at 3.75%, even as UK inflation climbs and the US hikes. That divergence comes down to where the inflation is coming from.
The BoE’s Monetary Policy Committee (MPC) voted six to three to hold, with three members wanting an immediate hike. A day earlier, the Federal Reserve raised US rates to 4%.
Why the Fed Hiked and the BoE Didn’t
The Federal Reserve raised its benchmark rate a quarter point to a range of 3.75% to 4% on September 16. It was the first US rate hike since 2023, coming a day before the BoE’s own decision.
Both central banks are responding to the same shock. Energy prices have surged since the Middle East conflict disrupted supply. Brent crude has climbed above $100 a barrel, lifting UK inflation to 3.1% in August, up from 2.9% in July.
Governor Andrew Bailey argues rates cannot fix an oil-driven price shock directly. He also sees little evidence that higher energy costs are spreading into wages. The Fed, facing a stronger labor market and its own inflation concerns, chose to act instead of waiting.
Economists at Dutch bank ING say the UK carries less wage-spiral risk now than in 2022. That gives the BoE more room to wait before raising rates.
Why Households Are Already Feeling It
UK households are not waiting for a formal hike to feel the cost. The average five-year mortgage rate has climbed to 5.87%, its highest level since November 2023. Lenders are already pricing in the chance of tighter policy ahead.
That leaves the BoE balancing two risks. Moving too fast could squeeze an already fragile economy. Waiting too long risks letting the energy shock harden into a lasting wage-price spiral.
Three policymakers already want a hike, and the Fed just moved the opposite way. If energy prices stay elevated, 3.75% may not be the final stop this year.
The post Why Is the BoE Holding Rates While the US Fed Hikes? appeared first on BeInCrypto.
Crypto World
Zcash targets November for NU7 mainnet upgrade with 25-second blocks

NU7 will cut Zcash block times to 25 seconds and preserve its halving schedule, with testnet activation planned for Oct. 6.
Crypto World
JR

Crypto World
Nostra Joins a September That Has Already Cost Crypto Over $326 Million
Starknet lending protocol Nostra paused its money market on Thursday after a manipulated price oracle let one account borrow roughly $3.5 million against NSTR collateral.
Lending, borrowing, withdrawals, and liquidations remain unavailable while the team reconciles each asset. Recovery prospects remain unclear for now.
Nostra Halts Money Market in September’s Latest Oracle Exploit
Nostra (NSTR) carries a market value of $546,751, according to BeInCrypto Markets data. A token that small needs little capital to move.
Follow us on X to get the latest news as it happens
The account pledged NSTR and drew Ethereum (ETH), Starknet (STRK), USDC, USDT, Wrapped Bitcoin (WBTC), and DAIv1. The haul exceeded the collateral token’s entire market value by roughly six times.
Security firm PeckShield reported that the account bridged $1.92 million to Ethereum. That transfer included 234.57 ETH and 1.3 million DAI.
Deposits collapsed afterward. Total value locked in the protocol fell from about $4 million on September 16 to roughly $710,632 at press time per DefiLlama.
Starknet’s Second Oracle Failure in Two Weeks
Nostra is not the only Starknet protocol hit this month. On September 4, an incorrect price from Pragma’s publishing pipeline was published across several Starknet feeds.
This triggered 47 liquidations across 42 borrower wallets on money market Vesu. Pragma reported 95% asset recovery in a September 13 update.
However, the two incidents differ in cause. Pragma’s case came from a publishing fault, while Nostra faced deliberate manipulation of a collateral price.
Meanwhile, Nostra is still counting the damage.
“We are reconciling the impact on each asset and tracing the funds. The final loss and potential recoveries are not yet known,” Nostra said.
The team also warned users about impersonators. Nostra said it will never send direct messages or ask holders to connect a wallet during recovery.
September has been costly for the sector. DefiLlama had logged more than $326 million in crypto losses this month before the Nostra incident. Most of that stems from the $320 million Liquid Network incident.
The pattern has held all year. PeckShield counted 50 hacks in August, the highest monthly tally of 2026, even as losses dropped 49.5% to $136.3 million. Nostra fits that shape of frequent, smaller thefts.
Subscribe to our YouTube channel to watch leaders and journalists provide expert insights
The post Nostra Joins a September That Has Already Cost Crypto Over $326 Million appeared first on BeInCrypto.
Crypto World
World’s ‘World Money’ Launches Self-Custody Super App
World has launched World Money, a new self-custody financial “super app” designed to bring stablecoin payments and digital-asset features into one place. The rollout began Thursday across more than 150 countries, though specific capabilities are expected to vary by region, according to World.
The new app supports sending supported digital assets—including stablecoins—to recipients using a World username. It also allows users to deposit eligible assets to earn rewards and to buy and sell digital assets through exchange integrations. World further says the experience is built around its identity layer while giving users direct control of their funds.
Key takeaways
- World Money rolls out in over 150 countries, with feature availability dependent on location.
- Users can send supported assets (including stablecoins) via World usernames, not just blockchain addresses.
- The app adds third-party “Mini Apps” such as Kalshi, Credit and Morpho.
- A partnership with Stripe enables top-ups and stablecoin purchases with Apple Pay for users in the US.
- World splits its identity and financial functions across two apps: World ID App and World Money.
What World Money includes at launch
World positions World Money as a self-custody super app that combines multiple financial functions: transfers, trading access, and rewards on certain deposits. The company says users can send supported digital assets to a recipient’s World username, with stablecoins among the assets initially covered.
In addition to peer-to-peer transfers, World Money includes a rewards component. Users can deposit eligible assets to earn rewards, a feature that continues the direction World App previously took with earning opportunities tied to blockchain assets.
For trading, World Money provides buy-and-sell functionality through exchange integrations, giving users a way to switch between supported digital assets without leaving the app environment.
“Mini Apps” and payments onboarding through Stripe
One of the most visible expansions is World Money’s support for third-party mini applications. World says users can access Mini Apps including Kalshi, Credit and Morpho. This approach mirrors the super-app idea of bundling specialized services into a single interface, while relying on external platforms for specific product functions.
World also highlighted a payments onboarding partnership. According to the company, integration with Stripe allows users to fund their accounts and buy stablecoins with Apple Pay, starting with users in the United States. That matters for adoption because fiat-to-stablecoin entry points remain one of the biggest friction points for users who do not already hold crypto.
World did not describe whether Apple Pay support will expand beyond the US as part of this initial rollout, so users outside the US should expect different funding options depending on local availability.
How World is reorganizing its product stack
The launch is also a structural change. World says that with World Money, its identity and financial services are now separated into two dedicated apps: World ID App for identity verification and credentials, and World Money for the wallet, payments and other financial features.
Existing users of World App and World ID App can reportedly use their existing accounts for World Money, which should reduce the migration burden for current customers and limit the risk of fragmenting user identities and balances across platforms.
World Money is operated by Tools for Humanity, the company co-founded by Sam Altman and Alex Blania that builds technology for the World network. Tools for Humanity’s involvement aligns with World’s broader push to connect identity to financial actions rather than treating payments as a standalone feature.
From World App to a two-app super app model
World’s move comes after more than a year of incremental expansion of World App. World App originally launched in May 2023, bringing together World ID with a crypto wallet, stablecoin transfers and token trading.
In October 2024, World introduced World App 3.0, describing it as a “super app for humans” and adding third-party Mini Apps plus a Vault feature for earning on assets. That indicates World has been testing the combination of identity, custody tooling and app-level distribution of third-party services before splitting the experience into two apps.
Later, World also experimented with traditional banking rails. In November 2025, it piloted virtual bank accounts in the US, and then expanded the idea a month later. World says those accounts can support paychecks and bank deposits that are converted into USDC, illustrating an intent to reduce the steps between payroll and stablecoin holdings.
With World Money now separated from the identity layer, the ecosystem looks to be evolving from a single “do everything” client into a clearer division: credentials and verification in one app, and financial activity in another.
Why the split and rollout matter for users
For everyday users, the most practical change is likely the user experience: sending assets through a World username, accessing third-party services through Mini Apps, and using mainstream payment rails like Apple Pay via Stripe. Those elements can make crypto interaction feel less like dealing with addresses and more like using familiar app flows—especially when the stablecoin payment layer is integrated directly into the wallet experience.
For investors and builders, the strategic question is whether World can maintain trust and usability while expanding self-custody financial features across geographies. The company’s decision to run identity and financial services through separate apps may help scale compliance, product development and onboarding workflows without forcing users to navigate unrelated functionality in a single interface.
As World Money becomes available in more countries, the next watch item is how quickly Stripe-based onboarding expands beyond the US and how feature availability differs by region. Users should also pay attention to which assets are considered eligible for rewards and how the lineup of Mini Apps evolves after launch.
-
Fashion7 days agoWeekend Open Thread – Corporette.com
-
Tech5 days agoThe Latest Weird Thing to Play Doom Is the Mapped-Out Brain of a Fruit Fly
-
Business7 days ago10 Most-Streamed Songs On Spotify In 2026 So Far, Led By Ella Langley’s Dominant Run On The Charts This Year
-
Crypto World7 days agoXAG/USD: Silver’s Short-Term Rally Meets Its Moment of Truth
-
Crypto World7 days agoDiesel Tops $6 a Gallon for the First Time as 28 States Set Records
-
Crypto World3 days agoKraken Lets xStocks Holders Earn Yield Through DeFi
-
News Videos7 days agoFacing Financial Fears
-
Crypto World4 days agoElon Musk Drops a Bombshell: Grok 5 Could Be the AGI Breakthrough
-
Crypto World1 day agoUS Charges Robinhood Engineers Over Crypto Listing Trades
-
Crypto World6 days agoCan AI Build a Startup in 72 Hours? Elon Musk's Team Will Livestream the Test
-
Entertainment6 days agoNews Specials, Movies, Shows, More
-
Business5 days agoRivals Sam Altman and Elon Musk Rally Behind Dario Amodei’s Call for a Slowdown in AI Development
-
Crypto World5 days agoNew Tesla Roadster Uses SpaceX Tech. Will It Impact the Stock Price?
-
NewsBeat4 days ago‘Sick conspiracy’: Trump says only guardrails AI needs is ‘a strong and smart (High IQ!) president’ in all-caps rant
-
Crypto World6 days agoRobinhood Chain Never Stopped But its Blobs Did Stop Reaching Ethereum For 14 Minutes
-
Crypto World2 days agoWhat Is the Status of the U.S.-Iran Peace Talks? Here's What Both Sides Are Saying
-
Entertainment6 days agoNew Horror Movie Officially Earns a Rare Stephen King Recommendation
-
Business6 days agoMarvell: Most Potent Setup Of The AI Factory Decade
-
Crypto World4 days ago3 Token Unlocks to Watch in the Third Week of September 2026
-
Crypto World3 days agoDOJ Seeks to Seize $61M in Iran Oil Funds From Binance Accounts It Vouched For

You must be logged in to post a comment Login