Issuer controls and the vote

A vault does not wash away the rules of the token inside it. If the token's issuer can freeze it or claw it back, those powers follow the token into the vault.

Freeze. When the issuer freezes the vault's asset:

• Nobody can deposit it.
• Shares cannot be sent to other accounts.
• Withdrawals can go only to the issuer.

Clawback. An issuer with clawback switched on can pull a depositor's part out of the vault. The ledger redeems that depositor's shares and sends the assets to the issuer. This exists for fraud and legal orders. XRP has no issuer, so an XRP vault cannot be clawed back.

Before depositing a token into any vault, check the token first. See Check before you hold.

Closing a vault. Only the owner can delete a vault, and only when it is empty. If the assets are gone but shares remain, the owner can burn those stranded shares to close it.

Where it stands. Single Asset Vault is not live on mainnet. The code shipped in January 2026, and validators are voting on it. It turns on after more than 80% of trusted validators support it for two weeks. Until then, vault transactions fail on mainnet.

Freezes and locks. Trust-line tokens can be frozen. MPTs can be locked.

• VaultDeposit fails with tecFROZEN or tecLOCKED when the asset is frozen or locked for the depositor or the vault's pseudo-account.
• VaultWithdraw to the asset's issuer is never blocked, even by a global freeze.
• Withdrawing a trust-line token to your own account: a regular freeze on you does not block it. A deep freeze does.
• For an MPT asset, any lock blocks a withdrawal to your own account.

VaultClawback has three fields: VaultID, Holder and an optional Amount.

• The asset issuer sends it. It performs a withdrawal on the holder's behalf and pays the issuer.
• It recovers at most the vault's AssetsAvailable.
• It uses the same loss-adjusted rate as a withdrawal, rounded down.
• It fails with tecNO_PERMISSION for XRP, for an MPT without the Can Clawback flag, or for a trust-line token whose issuer has not enabled Allow Trust Line Clawback.
• It works in every phase of a closed-ended vault.

Stranded-share burn. The vault owner can send VaultClawback with a share Amount. AssetsTotal and AssetsAvailable must both be 0, and the amount must be the holder's entire share balance.

VaultDelete returns tecHAS_OBLIGATIONS while the vault holds assets or has shares outstanding. On success it removes the vault's entries and frees the owner's reserve.

Audit. Halborn audited the feature in February and March 2025. Later amendments, fixCleanup3_1_3 through fixCleanup3_4_0, made further precision and rounding fixes.

The vote.

With a default vote of No, a validator votes against until its operator chooses yes. Support must stay above 80% of trusted validators for two weeks. If it drops, the clock restarts. See How amendments happen.

Live count: Amendments page.