XRP Healthcare announced that 4,011 XRPH Wallet accounts became victims of unauthorized transactions that began on September 3, 2026. Preliminary estimates indicate that the damage amounts to approximately $452,000 in XRP and related assets. Independent researchers linked the compromise to a possible transfer of seed phrases through a server request during the use of the staking feature. Users are advised to immediately cease using XRPH Wallet until the investigation is complete.
The company reported that the stolen assets have been traced to a single Ethereum address. According to on-chain researcher Handy Andy, the affected accounts lost 267,664 XRP and about 23.2 million XRPH, which were then converted to approximately 445,198 DAI on Ethereum. Users are strongly advised to switch to new wallets to protect their remaining funds: old seed phrases may remain compromised, and reusing them will keep the attackers' access to the assets.
The situation has drawn criticism from former Ripple developers, who claim that they previously rejected the project's grant applications due to identified risks. XRP Healthcare denied these allegations, stating that the team has been operating under risk conditions throughout its existence and intends to continue enhancing security. There is currently no official confirmation of the cause of the leak, leaving questions about the boundaries of privacy and security in DeFi projects open.