This Week on the Ledger

The week of October 12 to 18, 2026 centred on new regulated access points to XRPL assets. Standard Chartered began holding RLUSD for institutional clients through its Dubai branch, XRP treasury company Evernorth started trading on Nasdaq, and Chainalysis published data showing how far Canadian-dollar crypto markets have already moved onto U.S.-dollar stablecoins while Canada’s own stablecoin rules are still being drafted. On the protocol side, the XRP Ledger’s maintainers published a full account of the payment engine flaw patched in xrpld 3.4.1, and Privy added XRPL support to its embedded wallet platform.

Institutional Access: Bank Custody for RLUSD and a Listed XRP Treasury

On October 12, Ripple announced that Standard Chartered now supports institutional custody of RLUSD issued on the XRP Ledger. The service runs through Standard Chartered Bank’s DIFC Branch, which is regulated by the Dubai Financial Services Authority. The announcement also describes the next phase of a collaboration among Standard Chartered, Ripple and LMAX Group, under which the parties intend to make RLUSD eligible collateral for agreed LMAX products.

The collateral design is the operationally significant part. Standard Chartered is extending its collateral mirroring model to LMAX, so the value of eligible RLUSD is reflected at the trading venue while the tokens themselves stay in the bank’s custody. Because the stablecoin never has to move to the exchange, clients avoid the transfer step and the counterparty exposure to the venue that comes with it, which the release says should reduce operational risk and improve capital efficiency. Jack McDonald, Ripple’s SVP of Stablecoins, said customers “want the efficiency of a regulated stablecoin without giving up the custody standards they already trust.” The release notes that the LMAX capabilities remain subject to final documentation, testing, regulatory requirements and internal approvals.

The same day, Evernorth Holdings began trading on Nasdaq. Its Form 8-K, dated October 9, reports that the company completed its business combination with Armada Acquisition Corp. II on that date and that its Class A shares and warrants “began trading on Nasdaq on October 12, 2026 under the symbols ‘XRPN’ and ‘XRPNW.'” The filing lists Asheesh Birla as Chief Executive Officer and records that Ripple contributed 126,791,458 XRP to the company under a contribution agreement. As a listed SEC registrant, Evernorth is now subject to periodic public reporting, which gives institutional investors a publicly disclosed vehicle for XRP exposure alongside the existing spot products.

Canadian Market Data: Stablecoins Lead While the Domestic Framework Waits

Chainalysis published its 2026 North America adoption analysis on October 14. For the period July 2025 to June 2026, it puts Canada’s crypto economy at US$247.7 billion, up 2.3% year over year, and ranks Canada seventh globally in both domestic and cross-border flows. The findings most relevant to payments policy are these:

• By June 2026, stablecoins accounted for 44% of Canadian-dollar order book volume, up from 30% a year earlier. Chainalysis reports that USDC dominates this segment and that very little volume goes to Canadian-dollar-backed stablecoins.
• Remittance-sized stablecoin and bitcoin transfers from Canada to India, the Philippines and China totalled US$2.36 billion, up 141%, across 3.56 million transactions with an average size of $663.
• The report cites World Bank figures putting the average cost of sending money from Canada near 6.7%, with banks above 7%.

The report does not break out activity by ledger, so it says nothing specific about XRPL or RLUSD volumes in Canada. What it does show is the market Canadian rules will apply to once they arrive.

Protocol Infrastructure: The xrpld 3.4.1 Disclosure and New Wallet Tooling

The XRP Ledger’s maintainers published a vulnerability disclosure report on October 9 covering two bugs fixed in xrpld 3.4.1. The more serious one was an integer overflow in the payment engine that, according to the report, “could be exploited to create XRP from nothing” using specially crafted offers combined with a single payment. The invariant check meant to catch any XRP creation failed to detect it because it “summed balance changes the same way, so it wrapped around identically and detected nothing.” Cayden Liao and Veria AI reported the flaw through the XRPL bug bounty on September 22, the fix was merged September 23, and version 3.4.1 shipped as an emergency release on September 25. The report states that the team found “no evidence that this issue was exploited on any public network.”

The governance detail matters for anyone assessing how the network handles critical fixes. Normal transaction-processing changes go through the amendment process, which requires more than 80% validator support sustained for two weeks. The overflow fix did not; it took effect as each server upgraded, because the team judged that a public, weeks-long voting window would leave the bug exploitable. The report says that more than 80% of default UNL validators were running 3.4.1 on the day of release, before the fix’s source code was published. The source release followed on GitHub on October 10. The maintainers have added a release-process step that retests every fixed security finding against each release candidate.

On the application side, Privy, the Stripe-owned wallet infrastructure company, announced a partnership with Ripple to bring its wallets to the XRP Ledger. Developers can now create XRPL wallets programmatically, sign XRPL transactions, build with XRP and RLUSD, and enable x402 payments for agent-driven commerce, with policy controls and fee sponsorship planned. CoinDesk reported the release was dated October 13. For fintechs, the practical effect is that XRPL accounts can be embedded in an existing app without building key management in-house.