🚨🚨🚨 Batch is live on the XRPL 🚨🚨🚨 Warning!!! You now have a larger risk profile!!! It is not all doom and gloom as the much awaited new feature is absolutely useful BUT it is also a new way to hide a drain and adds another layer of risk IF you do not stay vigilant What does the Batch function give us? Up to 8 inner transactions, one approval, four modes What are the 4 modes? 1. All or nothing - every inner transaction succeeds, or the whole batch is reverted 2. Only one - the first inner transaction that succeeds is applied; the rest are skipped 3. Until failure - inners apply in order until one fails. That one and everything after it are skipped 4. Independent - each inner transaction is applied on its own, even if others fail If more than one account is involved, EACH account still has to sign What are "other accounts"? A batch can include transactions from more than one wallet. If it does, every account listed must sign. If you do not recognise an account in the batch, do not sign Consider the scenario that you can be asked to sign one Batch. Inside it there might be a payment, a regular-key change, a signer-list change, a trustline you weren't expecting How do I know if what I'm signing will authorise a payment, regular key change, signer list etc? Look at the signing screen in your wallet, not the website. The wallet shows the transaction type and the details. Expand everything Reject it if you see: SetRegularKey - this sets or removes a regular key SignerListSet - this creates or changes a signer list AccountSet - that disables the master key or changes flags you did not ask for If it is a Batch, open every inner transaction BEFORE you approve. If any of those three are inside and you did not start that flow yourself, reject the whole batch. A normal trade shows things like Payment, TrustSet, or OfferCreate. But STILL check the amount and destination What are the real consequences? You think you approved one prompt. In reality you may have signed a key change, a signer-list change, and a payment at the same time. That can hand the account over in a single approval Are the drains only on NFT's? No. NFTs are just a common lure. The real takeover usually comes from signing a key change or a signer-list change hidden next to something that looks harmless How can I stay safe? At SpyDex, we encourage everyone to READ EVERY INNER TRANSACTION on the signing screen, not just the word Batch and not trusting anything Reject anything that sets a regular key, changes the signer list, or disables the master key unless you opened that flow yourself In other words - if you did not initiate, do not engage Outer success is not enough. An outer Batch can return tesSUCCESS while one or more inner transactions failed. The outer result only means the batch itself was accepted. It does not mean every action inside it worked Where do I check the inner results? In your wallet, after you sign, open the transaction details and expand the Batch. Every inner transaction is listed with its own result code. You can also paste the hash into an explorer (SpyDex, XRPScan, Bithomp, etc.) and see each inner result separately What if I only check the inner txns after I have signed? Then you are already too late for anything dangerous. Checking after the fact tells you what happened. It does not undo a key change or a payment you already approved. The protection is BEFORE you sign - expand the inners on the wallet screen and reject the batch if anything is unexpected. Post-sign checks are only for confirming what actually applied Previously, the old Batch bug would have let someone apply inners without your key. It was caught on 19 February 2026 by Pranamya Keshkamat (@pk76776) and Cantina AI’s Apex tool (@cantinaxyz). UNL validators voted it down the same day. Ripple engineering and the XRPL Labs / @XRPLF response shipped an emergency release that blocked it. It never activated. No funds were taken. That fix does not protect you from signing a malicious batch yourself. All or nothing mode removes partial-execution risk. The other three modes do not. None of them remove the need to read what you sign As much as this is a major push forward, it does not eliminate the need to be vigilant. It in fact amplifies it. Up to 8 actions can now hide inside one prompt EVEN MORESO NOW, BE ALERT SHARE TO HELP THE AWARENESS SO PEOPLE STAY PROTECTED spydex.net - your keys, your control, your choice @xrpl_commons @Vet_X0 @allthemoney @JoelKatz