Unauthorized transactions beginning September 3 have drained approximately $452,000 from 4,011 XRPH Wallet accounts. While the development team works to trace the stolen assets to a single Ethereum address, independent researchers point to a critical vulnerability in the project's staking process that allegedly exposed user seed phrases to a remote server.
By WildWeb24·September 7, 2026·2 min read·362 reads
The incident has triggered a wave of scrutiny regarding the project's security architecture. Independent investigator Handy Andy reported that the breach resulted in the loss of 267,664 XRP and 23.2 million XRPH tokens, which were subsequently converted into 445,198 DAI. Although XRP Healthcare has contacted exchanges to freeze the destination address, the company has yet to release official server logs or a forensic report to confirm the exact mechanism of the theft.
Security and Credibility Concerns
The breach has emboldened past critics from the Ripple ecosystem, including former developers who previously flagged the project during grant review processes. Critics like Matt Hamilton and BiasGoose have alleged that the team misrepresented partnerships and ignored early warning signs, claims that XRP Healthcare has publicly dismissed as professional hostility.
For affected users, the path to recovery remains uncertain. Because the alleged exploit involves the compromise of master seed phrases, simply updating the application is insufficient. Security experts advise that any funds remaining in compromised wallets should be moved to entirely new, independently generated addresses immediately. The company has not provided a timeline for potential reimbursements or confirmed if law enforcement has successfully intervened to recover the lost capital.
Comments (0)
No comments yet. Be the first!