Ripple CTO Emeritus David “JoelKatz” Schwartz pushed back against claims that the XRP Ledger (XRPL) is effectively centralized, after founder and CIO of Cyber Capital Justin Bons argued that XRPL’s Unique Node List (UNL) structure makes validators “permissioned” and gives Ripple-aligned entities “absolute power & control over the chain.”
The exchange, sparked by Bons’ broader thread calling for the industry to “reject all centralized ‘blockchains’,” quickly narrowed into a technical dispute over what XRPL validators can and cannot do in practice and what “control” means in a system that relies on curated validator lists rather than Proof-of-Work or Proof-of-Stake.
The XRP Ledger Centralization AllegationBons framed it as a binary question: “either fully permissionless or it is not” and argued that even partial permissioning is a deal breaker. He also extended the critique into a broader institutional-adoption thesis: banks and incumbents may prefer controlled environments, but “those institutions will be left behind,” while “crypto natives” win by building and using fully permissionless systems.
Bons responded that he wasn’t alleging supply manipulation or fund theft, but insisted majority influence can still matter. “They can not steal funds, either, but they could potentially double-spend & censor,” Bons said. “Which, again, is exactly the same if someone controlled the majority of mining power in BTC.” He then suggested they debate live on a podcast.
He continued the point across multiple posts, leaning on a simple intuition: a dishonest validator is not an oracle; it’s just one vote. “If a validator tried to double spend or censor, an honest node would just count it as one validator that it did not agree with.”
What Schwartz Says The Real Attack Looks LikeHe also argued the empirical record matters, contrasting XRPL with other major networks. “The practical evidence tells this story,” Schwartz wrote. “Transactions are discriminated against all the time in BTC. Transactions are maliciously re-ordered or censored all the time on ETH. Nothing like this has ever happened to an XRPL transaction and it’s hard to imagine how it could.”
Schwartz later laid out a more detailed explanation of XRPL’s consensus model, emphasizing fast “live consensus” rounds—“every five seconds”—where validators vote on whether a transaction is included now or deferred to the next round. In that framing, the system’s key requirement is not blind trust in validators, but agreement on whether a transaction was seen before a cutoff.
He argued XRPL needs a UNL for two reasons: to prevent an attacker from spawning unlimited validators that force excessive work, and to prevent validators from simply not participating in a way that makes consensus impossible to measure. “That’s it. There’s no control or governance here other than coordinating activation of new features,” Schwartz wrote, adding that validators cannot force a node to enforce rules it does not have code for.
Schwartz closed with a longer, unusually candid rationale: that XRPL’s architecture was intentionally built to reduce Ripple’s ability to comply with demands to censor, even if Ripple itself wanted to be trusted.
“We carefully and intentionally designed XRPL so that we could not control it,” he wrote. “Ripple, for example, has to honor US court orders. It cannot say no… We absolutely and clearly decided that we DID NOT WANT control and that it would be to our own benefit to not have that control.”
He added a blunt incentive argument: even if Ripple could censor or double-spend, using that power would destroy trust in XRPL and therefore destroy the network’s utility. “And the best way to be able to say ‘no’ is to have to say ‘no’ because you cannot do the thing asked,” Schwartz wrote.
At press time, XRP traded at $1.3766.
