Ripple’s XRPL NFT plan on hold as developer finds fault in proposal

Please fol­low and like us:
Pin Share

Any hope of non-fun­gi­ble tokens (NFTs) being enabled on Ripple’s XRP ledger soon will have to wait as XRPL Labs lead devel­op­er Wietse Wind tem­porar­i­ly with­drew his vote in sup­port of the devel­op­ment on Sept. 11.

Accord­ing to Wind, a set­ting that could allow mali­cious play­ers to abuse mint­ed NFTs was discovered.

He added that the flaw could also lead to NFT issuers XRP tokens being “locked up due to actions of third parties.”

The prob­lem essen­tial­ly is with the col­lec­tion of roy­al­ties for mint­ed NFTs. Nor­mal­ly, the issuer will get a per­cent­age on every sec­ondary sale of the NFT. But XRPL requires that the issuer should have a trust line.

While this is good and pre­vents spam­ming, it could have dire effects on NFTs. The cur­rent XLS-20 spec­i­fi­ca­tion has a flaw: if a flag is set on an NFT, a trust line would auto­mat­i­cal­ly be cre­at­ed for the NFT issuer.

But the sale can hap­pen with­out the issuer’s knowl­edge and, in that case, lock up the account reserve.

“A once mint­ed and sent/sold NFT with the lsfTrust­Line + Trans­fer Fee could then be sold back and forth between two or more accounts from an attack­er, caus­ing more and more Trust Lines to be cre­at­ed for ran­dom shit­coins issued by the attacker.”

Wind said it now means the XLS-20 amend­ment may lose the major­i­ty. How­ev­er, he argued that this is the best thing and will give time to rec­ti­fy the prob­lem and vote again.

Wind revealed that the bug was iden­ti­fied by xTokenize.

The with­draw­al of that cru­cial vote from the XLS-20 amend­ment means that the plan to upgrade XRPL to make NFT mint­ing pos­si­ble will have to wait. Accord­ing to Wind, “this is not “XLS20 Good­bye”: this is “XLS20 See you later”.



Source link

Please fol­low and like us:
Pin Share

Leave a Reply

Your email address will not be published. Required fields are marked *