xrpld 3.2.1 Ships Validator-Manifest Security Fix

XRPL node operators were told to upgrade to xrpld 3.2.1, a focused security release addressing validator-manifest propagation risks.

Version 3.2.1 of xrpld is available. The official XRP Ledger release says it fixes security issues in validator-manifest propagation that could, in the worst case, consume excessive memory and processing resources.

U.Today independently reported the release and cited Ripple engineering director Vijay Khanna’s instruction for node operators to install the hotfix promptly.

A security release, not a feature release

The official release states that 3.2.1 contains no new features or amendments. Its purpose is narrower: hardening the reference server implementation and protecting service continuity.

“If you run an XRP Ledger server, upgrade to version 3.2.1 as soon as possible to ensure service continuity.” — XRP Ledger release notice

The operational distinction matters. Amendment proposals change protocol behavior after validator approval. This release changes server software operators run now.

What operators need to know

The official notice directs operators on supported platforms to use the normal installation or update instructions. It directs other platforms to build the release from source.

U.Today reported that Khanna described the patch as protection against a manifest-flood attack. The official release uses narrower language, describing security issues in validator-manifest propagation and their possible resource impact.

Separate from the 3.3.0 amendment package

Version numbers landing close together can blur two different tracks. The 3.2.1 release is an operator hotfix. The xrpld 3.3.0 package discussed by RippleX concerns amendments that still face validator governance.

For node operators, the immediate action in the official notice is unambiguous: update 3.2.1. For everyone else, the relevant point is that this release is maintenance and security work, not a new application feature.

Sources

• XRP Ledger — Introducing version 3.2.1
• U.Today — Tomiwabold Olajide, August 2, 2026