Thousands of Wallets Drained in the XRPL Ecosystem

An attack targeting the mobile wallets of XRP Healthcare, operating within the XRPL ecosystem, occurred on September 3, 2026. Attackers drained the balances of thousands of users in approximately three hours. The total loss reportedly reached millions in related tokens along with 267,000 XRP, with assets quickly transferred to the Ethereum network. The security vulnerability stemmed from users' private seed phrase data being sent to a server when the staking feature was enabled. XRP Healthcare confirmed the attack and stated that developers are conducting an urgent investigation, tracking the transactions, and coordinating with relevant authorities to freeze the assets. Former Ripple developers indicated that they distanced themselves from the project years ago. Developer BiasGoose argued that the events were not surprising and that the Uganda-linked health initiative had shown warning signs. The project team characterized the attitudes of former Ripple employees as unethical, claiming that the criticisms merely downplayed the risks faced by others. The crypto community is facing a dichotomy between the project team trying to trace the stolen assets and former industry figures warning of red flags.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.