XRP Healthcare, a healthcare platform built on the XRP Ledger, released the full report on last week's exploit on Sep. 8. The XRP Healthcare development team found out that a wallet-generatio
XRP Healthcare, a healthcare platform built on the XRP Ledger, released the full report on last week's exploit on Sep. 8.
The XRP Healthcare development team found out that a wallet-generation defect introduced on June 13, 2023, drastically reduced the effective keyspace, which made the offline reconstruction of private keys "computationally feasible."
Related: Ripple CEO blasts $11 billion gold transfer
In simple words, a three-year-old defect which made the XRP Healthcare wallets vulnerable led to 4,011 wallets getting drained on Sep. 3. The hacker has stolen $450,000 worth of crypto assets.
The development team also warned that every wallet this app has generated, not only these 4,011 drained wallets, must be treated as compromised. The rest of the wallets survived only because they held no funds. Otherwise, they remain exposed and any future deposit into them will get stolen, the team said.
"The defect is unpatched at the time of writing, the derivation is deterministic, and the algorithm is publicly readable," the XRP Healthcare development team warned.
The team first acknowledged the exploit on X on Sep. 4 when it rejected any rug pull claim and admitted the theft of XRPH, XRPHAI, and other assets from compromised XRPH Wallets. It also asked users to not use the wallet until further notice.
On Sep. 5, it said it has filed a formal report with law enforcement and is working with other crypto platforms to freeze the stolen assets.
On Sep. 6, XRP Healthcare revealed that the stolen funds have been traced end-to-end and approximately 445,198 DAI remains in an Ethereum address. It also asked users to submit loss reports on Etherscan.
4,011 wallets. One address. Three hours.It did not exist an hour earlier. It received the entire balance of 4,011 XRPH Wallet users: 267,664 XRP and 23.2M XRPH. Today it is 445,198 DAI on Ethereum, unmoved.Every step, every hash: https://t.co/AlQoQ6pQiL1/2 pic.twitter.com/l5Og1Fn4Cd
— xrpl.to (@xrplto) September 5, 2026
As per the onchain analytics platform xrpl.to, the 4,011 XRP Healthcare wallets that got compromised lost 267,664 XRP and 23.2 million XRPH tokens.
Related: Strategy just dropped $250 'Bitcoin' Jordans with one big catch
