$20 Million in XRP Drained from Thousands of Wallets in Six Attack Waves

Nearly $20 million in XRP was stolen from thousands of hardware wallets through six attack waves over nearly a week. The attacks, which began on September 15, targeted users of DCENT's mobile App Wallet and affected at least 6,678 distinct wallets.

Blockchain analysis firm XRPL.to traced the transactions, which totaled $18.68 million at XRP's current price of around $1.59 per token. The investigation revealed that some attackers used account deletion to extract balances that ordinary payment sweeps might have left behind.

DCENT has been working with Korean law enforcement and outside security specialists to trace the stolen funds and request freezes where possible. However, no freeze or recovery has yet been announced. The company urges users to abandon exposed recovery phrases and update their App Wallet from an official app store before moving their holdings to a new wallet created with a fresh recovery phrase.

The attackers also moved some of the stolen XRP through THORChain, which complicates attempts to recover the assets. DCENT has warned that users should be cautious against impersonators exploiting the incident and never share their recovery phrase or private key with anyone, including the company itself.