XRPH Wallet breach affects 4,011 wallets, $452,000 lost

XRPH Healthcare reported that unauthorized transactions began on September 3, 2026, affecting 4,011 XRPH Wallet accounts and resulting in an estimated loss of $452,000 in XRP and related assets.

Scope of the loss

Independent on‑chain analysis identified the following amounts taken from the compromised wallets:

• 267,664 XRP
• approximately 23.2 million XRPH tokens
• converted into roughly 445,198 DAI on the Ethereum network

Investigation findings

Investigators traced the stolen assets to a single Ethereum address and have contacted exchanges to request freezing or recovery of the funds. The breach is attributed by independent researchers to a possible seed‑phrase exposure during the wallet’s staking function, where activating staking may have transmitted seed phrases to a remote server. XRPH Healthcare has not released source code, server logs, or a forensic report confirming this root cause.

Response and user guidance

The project instructed users to stop using the XRPH Wallet while the investigation continues. Users who imported or created seed phrases in the affected application are advised to generate new wallets with trusted software and transfer any remaining assets, avoiding reuse of old seeds.

Community reaction

Former Ripple developers publicly criticized the project, citing earlier grant reviews that highlighted risks and alleged misrepresentations. XRPH Healthcare rejected the criticism, describing it as “genuinely pathetic.”

Next steps

XRPH Healthcare must determine the exact entry point of the breach, identify affected application versions, and clarify whether the server retained seed phrases. No reimbursement program or recovery deadline has been announced, and it remains unclear whether law enforcement or exchanges have successfully frozen the traced funds.