DCENT Wallet Hacked: Nearly $20 Million in XRP Stolen Across Six Attack Waves

Nearly $20 million in XRP was drained from thousands of wallets across six attack waves between September 15 and 20. The attacks were orchestrated by hackers who obtained access to the private keys of users who had stored their XRP on hardware wallets connected to D'CENT's mobile app wallet.

Blockchain analysis firm XRPL.to traced 11.75 million XRP leaving 6,678 distinct wallets during this period, including several collection waves after DCENT warned users of unauthorized transfers involving its mobile App Wallet. At XRP's current price of about $1.59, the tokens are worth roughly $18.68 million.

The draining then resumed with another collection wave beginning at 07:05 UTC on September 17, according to XRPL.to, while the final sweep captured in its investigation occurred at 20:56 UTC on September 20. The investigator counted 4,208 wallets swept through payment transactions and another 2,470 emptied through account deletion without a preceding payment in the dataset it traced.

DCENT has urged holders to abandon exposed recovery phrases and migrate their assets to a new wallet created with an entirely new recovery phrase, which also applies to some hardware-wallet users. The company's potential-impact criteria include addresses whose recovery phrase was used in the App Wallet and that signed transactions using an app version earlier than 8.1.0.