XRP Ledger Tests Payments That Unlock on Conditions

The XRP Ledger has moved its Smart Escrow testing environment to new infrastructure, giving developers updated tools to test custom rules for releasing locked XRP.
Key Takeaways
- Smart Escrow Devnet has reached its ninth release and moved to new infrastructure.
- The proposed feature would let escrow payments follow limited custom rules.
- Resource limits and mandatory cancellation dates aim to prevent funds becoming trapped.
- Smart Escrow remains a draft proposal rather than a live XRP Ledger feature.
A new Devnet gives Smart Escrow a wider test
Mayukha Vadari, a Staff Software Engineer at RippleX whose work focuses on XRPL programmability, announced the ninth Smart Escrow Devnet release on October 5. Her release note says the network has moved to new infrastructure, replacing the retired wasm.devnet.rippletest.net endpoints with wasm-devnet.dev.ripplex.io.
The address change is only one part of the update. Developers need a shared environment where their contracts, wallets, libraries and node configurations can be run against the same rules. That work becomes particularly important when code is involved in deciding whether locked funds may be released.
Vadari said the project remains in review and testing while the team hardens the framework and code. The Devnet provides a place to uncover compatibility and security problems before Smart Escrow can be considered for the live network.
Smart Escrow adds a programmable condition to locked funds
XRPL already supports escrow payments with straightforward release conditions. Funds can become available after a set time, or when someone provides the required cryptographic fulfillment. Those rules suit simple arrangements, though an application may need a named approver, a verified event or several conditions to be checked together.
Example: A buyer locks XRP for a seller. The escrow releases only after a named notary verifies delivery, while a deadline allows the buyer to recover the funds if that confirmation never arrives.
Smart Escrow is designed for such cases. A small WebAssembly program would be attached when the escrow is created, then run when someone attempts to finish it. The program evaluates the agreed rule and determines whether the release can proceed.
The XLS-0100 Smart Escrows specification lists possible uses ranging from compliance holds and milestone payments to token vesting, auction mechanics and oracle-based conditions. Each use case relies on the same core idea: the rules for releasing the funds are written into the escrow before the money is locked.
Restrictions are designed to protect the network and the funds
Any system that runs code around a payment needs clear limits. Every XRPL validator must reach the same result when an escrow is finished, otherwise the network could not agree on the ledger’s state.
Smart Escrow code therefore runs in a restricted environment. It cannot freely call outside services or access files, and it faces limits on memory and computation. Those boundaries help prevent a poorly written contract from consuming excessive resources or producing conflicting outcomes across validators.
The proposal also requires every Smart Escrow containing bytecode to include a CancelAfter time. Users would have a route to recover locked funds if a condition cannot be met, a counterparty fails to act or the code contains an error.
Ripple’s Smart Escrow developer library already includes examples involving notary approval, credential checks, oracle data and NFT ownership. Those examples show the kinds of rules developers can test, while the Devnet exposes whether the underlying system handles them consistently.
The ninth release updates the machinery behind those rules
Release nine reorganises how the network runs Smart Escrow code. Vadari said the WebAssembly integration has moved from C++ to Rust, bringing gas accounting, error handling and validation checks through one entry point. Her release note estimates a 30% to 50% improvement in host-function calls, a technical measure relevant to the developers building and testing escrow logic.
The software libraries have changed as well. Developers are being asked to move away from the deprecated all-in-one package toward separate common and escrow-focused libraries, then retest their applications against the new Devnet. A contract that compiles locally still needs to work with the network, its transaction format and the tools surrounding it.
That is the practical value of the release. It gives teams a more stable environment for finding the problems that appear only when several pieces of infrastructure have to work together.
Conditional escrow could complement automated payments
Controlled release rules could also complement the XRP Ledger’s work on AI payments in XRP and RLUSD. An agent may prepare a payment, while Smart Escrow could define the circumstances in which funds already placed in escrow are allowed to move.
That division gives applications room to automate routine steps without leaving the conditions for releasing money vague. The wallet, the payment request and the escrow each serve different roles, making it easier to identify where a decision was made if something goes wrong.
Smart Escrow still needs a path to mainnet
Smart Escrow remains a draft proposal. A live version would require a formal amendment, further implementation and security review, followed by a mainnet activation process.
The ninth Devnet build gives developers a better place to test the proposed rules. Its progress will be measured through successful migrations, security findings and the response of the wider XRPL community as the feature moves toward a possible mainnet path.
This article is for informational purposes only and does not constitute investment advice. Smart Escrow is under development, and its specifications, timeline and route to mainnet may change.









