Every protocol change the ledger has voted on, from 2016 to this week.

Atomic batches of up to 8 inner transactions from one account — the replacement for Batch.

Delegate granular transaction permissions to another account without handing over keys.

Pooled single-asset vaults that strategies (including lending) can allocate from.

Confidential MPT transfers: amounts stay hidden while remaining verifiable.

Lets an MPT issuer update metadata, transfer fee, and some flags after issuance.

Native fixed-term lending against Single Asset Vaults, with off-chain underwriting.

Fixes rounding of witness rewards on XChainBridge claims.

3.4.0 bundled fixes: incoming-trustline blocker on OfferCreate, permissioned-DEX domain swaps, AMMClawback rounding.

A sponsor pays reserves and transaction fees so end users never have to hold XRP.

Witnessed cross-chain bridges between XRPL Mainnet and sidechains.

Closed-ended vaults and cash-basis accounting for native XRPL lending.

3.3.0 cleanup: freeze checks, check IDs, hybrid offers, AMM rounding.

3.2.0 cleanup for vaults, lending, permissioned DEX, MPTs, and domains.

Bundled 3.1.3 protocol fixes. Activated May 27, 2026.

Order books that only credentialed accounts in a Permissioned Domain can trade.

Escrow for issued tokens and MPTs, not just XRP.

Named on-ledger domains that gate access using Credentials.

Correctness fixes for TokenEscrow finish, cancel, and amount delivery.

Stops AMMClawback from rounding LP-token burns down to zero while still taking value.

Includes keylet fields in more ledger objects so indexers can address them uniformly.

Fixes PriceOracle update ordering so a ledger sees a consistent published price.

Reports DeliveredAmount correctly for Multi-Purpose Token payments.

Enforces directory size limits that some object types were bypassing.

Multi-Purpose Tokens: a compact fungible-token primitive that does not use classic trust lines.

On-ledger verifiable credentials: an issuer attests a fact about an account.

Third AMM fix bundle: rounding, clawback interaction, and invariant alignment.

Second pass on NFT trust-line authorization enforcement.

Honors CancelAfter on payment channels so expired channels cannot be claimed.

Lets an NFT’s URI (metadata pointer) be updated after mint.

Rejects transactions that set undefined or reserved flags.

Stops LP tokens from being transferred when the underlying AMM asset is frozen.

A stronger freeze: frozen holders cannot even send the token back to the issuer until unfrozen.

Mint an NFT and list a sell offer in one transaction.

Second pass on dust-offer cleanup after AMM and NFT offer interactions.

Second AMM fix bundle: LP token transfer, freeze, and rounding.

Enforces issuer authorization when transferring NFTs that require a trust line.

Further inner-object template fixes after the first template amendment.

Repairs linked-list pointers on NFToken pages so directory walks stay complete.

Lets a clawback-enabled issuer reclaim tokens sitting in an AMM pool.

On-ledger price oracles that publishers update and apps can read in the same ledger version.

W3C Decentralized Identifiers as first-class ledger objects.

Rejects empty DID documents that previously could be stored.

Ensures PreviousTxnID / PreviousTxnLgrSeq are written on objects that were missing them.

First production AMM bug-fix bundle: deposit, withdraw, and auction-slot math.

Charges the correct reserve when an NFT offer is accepted.

Tightens Fill-or-Kill offer handling so unfilled FOK offers never rest on the book.

Fixes DisallowIncoming so the flags apply consistently across object types.

Prevents AMM-related offers from overflowing amount fields.

Fixes serialization of inner AMM (and similar nested) objects.

Stores fees in drops of XRP instead of abstract fee units.

Native automated market maker: on-ledger liquidity pools that trade alongside the central limit order book.

Lets a regulated issuer reclaim issued tokens from holders — required for many securities and stablecoins.

Changes NFT sequence allocation so a burned token’s ID cannot be minted again.

Removes or adjusts offers that rounding reduced below a useful size.

tfImmediateOrCancel offers that kill without filling now return tecKILLED instead of tesSUCCESS.

Unifies decimal number handling inside xrpld onto one numeric type.

Prevents an account from creating a trust line to itself.

Follow-up NFT correctness: offer matching, directory links, and transfer-fee edge cases.

Lets an account refuse incoming trust lines, NFTs, checks, or payment channels.

Cashing a check can create the needed trust line instead of failing if one is missing.

The NFT standard that actually activated: mint, offer, broker, and burn NFTokens on-ledger.

Removes the auto-trust-line flag from NFToken minting that could surprise issuers.

Raises the maximum SignerList size from 8 to 32 signers.

Lets the network temporarily ignore validators that are offline so quorum can still be reached.

Tickets reserve a sequence number in advance so transactions can be submitted out of order.

Removes economically dust offers whose quality increased after rounding.

Sorts payment strands before execution so path order is deterministic.

Canonicalizes STAmount encoding so equivalent numbers compare equal.

Strengthens how validation messages are constructed and checked.

Fixes a consensus/validation edge case shipped with HardenedValidations.

Fixes how the 80% amendment majority is calculated so votes are not rounded the wrong way.

Uses the Flow engine to cross offers, so OfferCreate and payments share one matching algorithm.

Fixes quality (price) upper-bound math when ranking DEX strands.

Rejects transaction signatures that are valid but not fully canonical, closing a malleability vector.

On-ledger checks: a sender authorizes a pull payment that the recipient cashes later.

Lets you delete an unused XRPL account and recover most of its reserve.

Fixes metadata threading on Check ledger objects so history is complete.

Puts the payment-channel recipient on the owner directory so channels are visible from both sides.

Stops an account from setting its own master key as the regular key, which could lock the account in a surprising way.

Cuts the owner reserve for a SignerList so multi-signing is not punishingly expensive.

Removes leftover offers that the taker can no longer fund.

OfferCreate with tfFillOrKill now returns tecKILLED instead of tesSUCCESS when the offer is killed.

Adds a DepositPreauth ledger object so accounts with DepositAuth can whitelist senders on-chain.

Fixes offer-crossing when the taker would go dry mid-cross.

Corrects additional escrow and payment-channel field handling.

Fixes a fee/amount calculation edge case in payment processing.

Requires EscrowCreate to set Condition or FinishAfter, and fixes time-based escrow finish.

Fixes a payment-engine issue that interacted with deposit authorization.

Lets an account refuse incoming payments unless the sender is preauthorized.

Hardens amount canonicalization so malformed amounts cannot sneak into the ledger.

Fixes a directory-iteration bug that could skip or repeat entries.

Corrects offer-crossing behavior in a specific quality-bound case.

Fixes how some transaction results were reported when crossing offers failed part-way.

Sorts DirectoryNode entries and deletes empty owner-directory pages that used to be left behind.

Adds runtime invariant checks so a transaction that would break ledger rules is rejected instead of applied.

Corrects additional payment-engine edge cases discovered after Flow activated.

Time-locks or condition-locks XRP until a date or crypto-condition is met.

Fixes payment processing so certain path-crossing cases no longer fail or mis-apply amounts.

Creates unidirectional Payment Channels for high-volume XRP micropayments that settle on-ledger only when claimed.

Lets issuers set how many significant digits an order book uses, so the DEX does not fill with dust-priced offers.

Adds IETF crypto-conditions (PREIMAGE-SHA-256) so payments and escrows can be claimed only by revealing a secret.

Rewrote payment pathfinding so rippling, offers, and multi-hop paths settle as one consistent flow.

Lets issuers pre-authorize a zero-balance trust line so regulated tokens can require approval before anyone holds them.

Lets an account require multiple signatures before a transaction is valid — shared custody without a single private key.

Makes transaction fees rise automatically when the ledger is busy, so spam becomes expensive and legitimate payments still clear.

Would have patched inner signatures on the original Batch amendment. Obsolete.

Original permission-delegation amendment. Replaced by PermissionDelegationV1_1 after a critical bug.

Original atomic batch-transaction amendment. Disabled after an inner-transaction signature bug.

Would have forbidden negative-priced NFT offers. Obsolete; covered by later NFT fixes.

Directory fix for the original NFT amendment. Obsolete with V1_1.

Original NFT amendment. Replaced by NonFungibleTokensV1_1 before it could activate.

Would have added extra crypto-condition types beyond PREIMAGE-SHA-256. Never enabled; removed.