How Does XRP Ledger Work?

Ripple Protocol Consensus Algorithm (RPCA) — federated BFT where each node maintains a Unique Node List (UNL) of trusted validators. Consensus requires 80%+ agreement among UNL members. 3-5 second finality, 1,500 TPS baseline.

RPCA has been in production since 2012, making it one of the longest-running blockchain consensus mechanisms. The federated trust model is distinct from permissionless PoS but is well-understood after 13+ years.

Transaction fee destruction — every XRP transaction burns a small amount of XRP (minimum 10 drops = 0.00001 XRP). This creates a marginal deflationary effect over time, though the absolute amount burned is negligible relative to total supply.

Fee burning for spam prevention is a standard mechanism. XRP's fee burn rate is extremely low given current transaction volumes.

Ripple escrow mechanism — 1 billion XRP unlocked monthly from cryptographic escrow. Ripple typically re-escrows 70-80% and uses the remainder for operations, ecosystem grants, and market sales. Escrow contracts are on-chain and time-locked.

On-chain escrow is a standard mechanism. The specific implementation of monthly billion-token unlocks with discretionary re-escrowing is well-established since 2017. The centralized nature of Ripple's escrow decisions is the key risk.

Built-in XRPL DEX — native order book exchange allowing limit orders for any token pair issued on the ledger. Pathfinding enables multi-hop trades. Auto-bridging through XRP as a bridge currency.

On-chain order books have been part of XRPL since launch. The pathfinding and auto-bridging mechanisms are mature and well-tested. AMM functionality was added in 2024.

Amendment system — protocol upgrades require sustained 80%+ validator support over a 2-week voting period. Validators signal support for amendments; activation is automatic once threshold is met. No formal on-chain governance token or DAO structure.

The amendment system is a form of rough consensus via validator signaling. It is simple and battle-tested but lacks the nuance of token-weighted governance systems.

Cross-chain bridge capabilities — XRPL supports sidechains and is developing IBC integration with Cosmos/Solana ecosystems. XRP bridge functionality enables cross-ledger atomic transactions.

Bridge capabilities are standard across L1s. The IBC integration is in development and not yet live.

Ripple's discretionary escrow management (1B XRP monthly unlocks, 200-300M entering circulation) overwhelms the marginal deflationary effect of transaction fee burns. The effective supply expansion is entirely controlled by a single entity without governance oversight.

The amendment system's 80% threshold combined with UNL influence means Ripple's recommended validator list can significantly affect which protocol upgrades activate. A concentrated UNL could block or force amendments that affect all network participants.

The native DEX's pathfinding and auto-bridging through XRP creates dependencies on XRP liquidity for cross-pair trades. During periods of low liquidity, multi-hop trades may fail or execute at unfavorable rates, particularly for non-XRP pairs.

Ripple's dominant supply position (39% of total XRP) creates a principal-agent conflict: the entity that controls the largest token position also influences the recommended UNL that determines validator trust. No on-chain mechanism prevents this overlap.

The February 2026 Batch amendment critical flaw demonstrated that new protocol features activated through the amendment process can introduce severe vulnerabilities. The amendment voting period is the primary defense against flawed upgrades, and it nearly failed to catch an $80B-at-risk bug.