XRP Ledger Wallet App Hacked, Users Warned of Phishing Attacks
XRP Ledger AI Healthcare Platform's XRPH Wallet app has been taken offline due to a recent security incident that resulted in the theft of 267,664 XRP.
The removal of the XRPH wallet apps was done by the team at XRP Healthcare as a precautionary measure after the incident occurred. The wallets still exist on the XRP Ledger, allowing users to independently check their balance and transaction history without the app.
An investigation has been launched into the breach, which saw 4,011 wallets affected, with approximately $452,000 in assets stolen. The funds were traced to a single Ethereum wallet where about 445,000 DAI currently sits and has not moved.
According to xrpl.to, XRPH payments are signed on the phone while the seed is stored unencrypted, and the staking feature sends the seed to XRP Healthcare's server. This exposure was suggested to be the entire user base of the XRPH app, not just those who used the staking feature.