D'CENT Wallet Heist: Over $2.8 Million in XRP Drained Within Two Hours

A major attack on the D'CENT wallet drained over $2.8 million in XRP from more than 1,500 users within two hours.

The attackers used automated software to target wallets with a list of compromised private keys, not scanning the XRP Ledger for wealthy accounts in real-time.

The first wave of the attack started at 16:29 UTC on September 15, 2026, and the second wave began at 17:17 UTC after the attackers fixed the reserve calculation to correctly account for extra reserves required for each object held by an account.

By 18:34 UTC, the attackers had drained 1,552 wallets and collected a total of 2,009,321 XRP. The stolen funds were then moved toward exchanges before being laundered through disposable wallets and eventually reached Binance at 20:18 UTC.