A recent security incident has prompted health-focused platform XRP Healthcare to take its XRPH Wallet app offline. The company clarified that the removal of the application from stores was a preemptive safety measure executed by its own team, rather than a result of any actions by external attackers.
Thousands of Wallets Affected
According to a security update released by XRP Healthcare on September 4, multiple unauthorized transactions were discovered, affecting 4011 wallets. The breach resulted in the loss of approximately $452,000 in assets. As a precaution, the company has advised users to refrain from using their wallets until further notice.
How Did the Funds Move?
The evaluation suggests that the XRP Ledger infrastructure itself was not directly compromised, leaving the exact method of the breach uncertain. Comprehensive verification and technical investigations are ongoing to pinpoint the flaw. Initial insights reveal that within a span of about three hours, a newly generated address appropriated the cumulative balances of the affected wallets.
In terms of asset movement, 311,613 XRP were channeled through NEAR Intents and converted into 178.46 ETH on the Ethereum network. This amount later consolidated into 445,198 DAI, which remains unmoved according to current data.
Inspection of the events exposes several critical points:
- The vulnerability might not be isolated, reflected in the fact that nearly 70% of impacted users did not use the staking feature.
- Out of 1225 wallets engaged in staking, nearly all experienced depletion.
- Seed data was reportedly stored unencrypted, heightening exposure risks.
- Staking operations allegedly involved sending seed data to the company’s server, increasing vulnerability.
The evidence indicates that, although both staking and non-staking users were affected, there may be broader systemic weaknesses within the wallet application. Despite ongoing investigations, XRP Healthcare has emphasized that wallet balances on XRP Ledger are accessible, allowing users aware of their XRPL addresses to keep an eye on their funds as the examination unfolds.
