XRP Ledger Wallet App Compromised in $452,000 Heist

XRP Ledger Wallet App Hacked, $452,000 in Assets Stolen

On September 4, XRP Healthcare issued a security update for the XRPH wallet due to multiple unauthorized transactions affecting users. The incident occurred when an unknown individual or group gained access to the wallet keys and stole around $452,000 worth of assets from approximately 4,011 wallets.

The affected funds were traced to a single Ethereum wallet where about 445,000 DAI currently sits and has not moved since. XRP Healthcare's preliminary investigation found no evidence of a fault with the XRP Ledger itself. The exact method by which the wallet keys were compromised is still being investigated.

According to xrpl.to, XRPH payments are signed on the phone while the seed is stored unencrypted, and the staking feature sends the seed to XRP Healthcare's server. A total of 1,225 wallets staked, nearly all between December 2023 and July 2024, with 1,198 of them drained.

XRP Healthcare took the XRPH Wallet app offline as a security precaution following the breach. The wallet is not 'gone' because the app is offline; if your funds are still showing on-chain, they are still in your XRPL account. Access through the XRPH Wallet app has been disabled while the compromise is investigated.