$20 Million in XRP Stolen from Thousands of D'CENT App Wallets in Coordinated Attack

A coordinated attack on D'CENT App Wallet users has drained approximately $20 million in XRP, according to XRPL.to's on-chain forensic timeline. The theft occurred between September 15 and 20, with six separate waves of attacks that targeted thousands of wallets.

The attackers used both manual and automated scripts to drain the funds, reusing identical code and fee patterns across multiple waves. This suggests a single coordinated actor carried out every stage of the operation.

In total, 11.7 million XRP was stolen from approximately 6,678 wallets using keys that the thief already controlled. The attackers went beyond simple transfers, deleting 5,001 accounts entirely to claim their remaining reserve balances.