Hackers Drain $20M in XRP Across 6,678 Wallets
Six coordinated attack waves targeted thousands of XRP holders, prompting urgent warnings for wallet users to replace compromised recovery phrases.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- Nearly $20 million in XRP was stolen from 6,678 individual wallets.
- Onchain tracker XRPL.to traced the exploit through six attack waves up to Sept. 20.
- D'CENT warned that compromised seed phrases must be replaced, even on hardware wallets.
A serial security breach just drained nearly $20 million in XRP from 6,678 wallets, striking victims across six separate attack waves.
On-chain analytics platform XRPL.to tracked the coordinated drains through Sept. 20. The methodology wasn't complex: attackers targeted users whose recovery phrases had been exposed through software wallet applications, allowing bad actors to systematically sweep funds from affected addresses.
Hardware Won't Save a Leaked Seed
Following the exploit, wallet provider D'CENT issued an urgent notice to its user base. The company warned that anyone who previously exposed their App Wallet seed phrase to a connected device must generate a completely new recovery phrase immediately—even if they currently manage those funds on a cold hardware wallet.
Hardware wallets keep private keys offline. That's the point. But they offer zero protection if the underlying seed phrase was already typed into a phone, computer, or hot wallet app beforehand. Once an attacker gets those words, your hardware device is useless.
Why it matters
Cold storage is only as secure as the moment your seed phrase was born. If you ever imported a software key onto a hardware device, or typed a cold recovery phrase into a mobile app, your funds are at high risk. Move your XRP to a brand-new wallet with a freshly generated offline seed before the next wave strikes.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇦🇺 Showing sites that accept players from Australia Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
More info Less info
Why we chose it: One of the widest crypto line-ups of any book we list - seven coins with fast payouts - aimed squarely at Asia and Latin America rather than the US or Western Europe.
- Licence
- Curacao
Restricted countries: Austria, Belgium, Bulgaria, Cyprus, Czechia, Germany, Denmark, Estonia and 21 more.
More info Less info
Why we chose it: Built for American bettors, priced accordingly. Biggest welcome bonus of the five, attached to the heaviest rollover of the five.
- Online since
- 1994
- Licence
- Curaçao
- Payout time
- 24–48 hours (crypto)
- Wagering
- 18x sportsbook / 30x casino
- KYC
- Required
Restricted countries: Belgium, Costa Rica, Croatia, Curaçao, Aruba, Sint Maarten, Caribbean Netherlands, France and 11 more.
Mia Chen
Mia digs into DeFi and on-chain data, translating protocol mechanics into plain English for everyday readers.
