Hackers Drain $20M in XRP Across 6,678 Wallets
Six coordinated attack waves targeted thousands of XRP holders, prompting urgent warnings for wallet users to replace compromised recovery phrases.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- Nearly $20 million in XRP was stolen from 6,678 individual wallets.
- Onchain tracker XRPL.to traced the exploit through six attack waves up to Sept. 20.
- D'CENT warned that compromised seed phrases must be replaced, even on hardware wallets.
A serial security breach just drained nearly $20 million in XRP from 6,678 wallets, striking victims across six separate attack waves.
On-chain analytics platform XRPL.to tracked the coordinated drains through Sept. 20. The methodology wasn't complex: attackers targeted users whose recovery phrases had been exposed through software wallet applications, allowing bad actors to systematically sweep funds from affected addresses.
Hardware Won't Save a Leaked Seed
Following the exploit, wallet provider D'CENT issued an urgent notice to its user base. The company warned that anyone who previously exposed their App Wallet seed phrase to a connected device must generate a completely new recovery phrase immediately—even if they currently manage those funds on a cold hardware wallet.
Hardware wallets keep private keys offline. That's the point. But they offer zero protection if the underlying seed phrase was already typed into a phone, computer, or hot wallet app beforehand. Once an attacker gets those words, your hardware device is useless.
Why it matters
Cold storage is only as secure as the moment your seed phrase was born. If you ever imported a software key onto a hardware device, or typed a cold recovery phrase into a mobile app, your funds are at high risk. Move your XRP to a brand-new wallet with a freshly generated offline seed before the next wave strikes.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇺🇸 Showing sites that accept players from United States Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Mia Chen
Mia digs into DeFi and on-chain data, translating protocol mechanics into plain English for everyday readers.
