Overview
- The company said unauthorized transactions on Sept. 3 and Sept. 4 moved about 267,664 XRP plus millions of native tokens from roughly 4,011 XRPH Wallets, with on-chain tracing valuing the loss near $450,000 to $452,000.
- XRP Healthcare’s developer review found the wallet passed a 55-character value into xrpl.Wallet.fromEntropy() but effectively used only the first 16 characters and Math.random(), which sharply reduced key entropy and made offline key recovery feasible.
- Using the reduced keyspace the team reproduced private keys for nine live wallets and confirmed four drained accounts, and the project warned all seeds created by XRPH Wallet should be abandoned.
- The firm has taken XRPH Wallet apps offline, begun an operational wind-down, is coordinating token delistings (XRPH and XRPHAI) with exchanges, and says it will preserve transaction records and pursue recovery with platforms and authorities.
- Independent contributors had raised concerns about the project before the incident, no full public forensic report or verified recovery totals have been published, and the traced stolen funds now sit in an Ethereum address holding about 445,198 DAI.