Richard

2024

A key executive of Ripple, the company behind the XRP ledger, may have had his personal crypto wallets compromised via an inside job.&nbsp;
According to a Feb. 7 report from blockchain analytics platform Hacken, the hacker who exploited Ripple co-founder and chairman Chris Larsen’s <a href="https://cointelegraph.com/news/ripple-s-chairman-larsen-reportedly-hacked-for-213-m-xrp" rel="noopener noreferrer nofollow">personal wallets for&nbsp;$112.5 million</a> worth of XRP (<a href="https://cointelegraph.com/xrp-price-index" rel="noopener noreferrer nofollow">XRP</a>) on Jan. 31 also had links to a wallet account that Ripple may have controlled.
However, the blockchain auditing firm stopped short of claiming that the attack was carried out by a Ripple employee, stating that it was “[too] early for conclusions.” Nevertheless, the firm claimed that “two wallets connected to XRP’s authorized wallet played key roles” in the attack.
<blockquote class="twitter-tweet">
 <a href="https://twitter.com/Ripple?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@Ripple</a> Case: Insights That Went Unnoticed Driven by peculiar intricacies surrounding a recent XRP event, our team embarked on an in-depth inquiry The key outcome of our investigation: two wallets, that took a central stage in the incident, are connected to XRP’s authorized… <a href="https://t.co/CQDU9ggkTF" rel="noopener noreferrer nofollow">https://t.co/CQDU9ggkTF</a>— Hacken (@hackenclub) <a href="https://twitter.com/hackenclub/status/1755246957201678670?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">February 7, 2024</a>
</blockquote>
On Jan. 31, Larsen claimed that some of his personal wallets had been compromised, causing him to lose 213 million XRP, worth $112.5 million at the time of the incident. The following day, Binance CEO Richard Teng revealed that his exchange had frozen $4.2 million worth of XRP stolen in the attack.
Hacken’s researchers say the attacker allegedly split up the stolen funds into eight different wallet accounts. From there, six of the wallets sent funds to a single intermediate wallet with an address that begins with “rHyqB,” which subsequently sent $70.9 million worth of XRP to yet another address starting with “ro4ha.”
Additional XRP was sent through other intermediate wallets before reaching a Binance deposit address.
<figure data-ct-non-breakable="true"><img src="https://s3.cointelegraph.com/uploads/2024-02/1c040718-598e-4767-9124-93f30a02982a.jpg" alt="" title="">
 <figcaption style="text-align: center;">Chart of fund flows after Chris Larsen wallet compromise. Source: Hacken
 </figcaption>
</figure>
After establishing the funds’ whereabouts, Hacken began analyzing the incoming transactions to each wallet. Researchers found that a wallet address beginning in “rU1bPM4” had sent $64.6 million in XRP to Larsen in the past. It also sent $37,500 worth to one of the intermediate wallets later used to transfer the stolen funds.
This seems to imply either that a person who sent Larsen $65 million also sent $37,500 to the attacker or else the attacker is the person who sent these funds to Larsen.
This wallet account beginning in “rU1bPM4” also sent nearly $2 million to a Kraken deposit address in 2020, and the attacker made deposits to this same Kraken account, Hacken claimed. The firm claimed the Kraken deposit account was “allegedly used to funnel funds” from the attack.
Related: <a href="https://cointelegraph.com/news/xrp-price-clawback-reversible-transactions" rel="noopener noreferrer nofollow">XRP clawback — Will ‘reversible’ transactions boost price?</a>
In addition, researchers claim that the “rU1bPM4” account has “longstanding ties with XRP, predating the incident,” implying that it may have been an “authorized wallet.” Hacken wrote:
<blockquote>
 “In this [$112.5 million hack] incident, two wallets connected to XRP’s authorized wallet played key roles. It’s [too] early for conclusions, but the story is getting more interesting.”
</blockquote>
An investigation into the hack is continuing. Cointelegraph reached out to Ripple for comment but did not receive a reply by the time of publication.
Related:&nbsp;<a href="https://cointelegraph.com/news/binance-froze-4-2-m-xrp-ripple-chris-larsen" rel="noopener noreferrer nofollow">Binance froze $4.2M of XRP from hack on Ripple co-founder’s wallet</a>

Hacken links Ripple chairman’s hack to XRP official wallet

Cointelegraph

Other articles published on Feb 7, 2024

Kodiak Finance Raises $2M

Top 7 Memecoin for Investors to Hold in 2024: Emerging Memecoin Attracts Major Investments

Thailand Advances Crypto Hub Ambitions with Tax Exemption Strategy

Breaking Down The Solana Outage: What Went Wrong Yesterday?

Bitcoin Miner CleanSpark Purchases Four Mining Facilities, Set to Double Hash Rate

Solana slides by 4% amid network outage

Join our free newsletter for daily crypto updates!