intern

XRP Healthcare, a healthcare platform built on the <a href="https://www.thestreet.com/crypto/tag/xrp-ledger" rel="noopener noreferrer nofollow">XRP Ledger</a>, <a href="https://xrphtoken.com/XRPH%20Wallet%20Root-Cause%20Technical%20Report%20-%20Developer%20Findings.pdf" rel="noopener noreferrer nofollow">released</a> the full report on last week's exploit on Sep. 8.
The&nbsp;XRP Healthcare development team found out that a&nbsp;wallet-generation defect introduced on June 13, 2023,&nbsp;drastically reduced the effective keyspace, which made&nbsp;the offline reconstruction of private keys "computationally feasible."
<a href="https://www.thestreet.com/crypto/markets/ripple-ceo-blasts-11-billion-gold-transfer" rel="noopener noreferrer nofollow">Related: Ripple CEO blasts $11 billion gold transfer</a>
In simple words, a three-year-old defect which made the XRP Healthcare wallets vulnerable led to 4,011 wallets getting drained on Sep. 3. The hacker has stolen $450,000 worth of crypto assets.
The development team also warned that every wallet this app has generated, not only these 4,011 drained wallets, must be treated as compromised. The rest of the wallets survived only because they held no funds. Otherwise, they remain exposed and any future deposit into them will get stolen, the team said.
<blockquote>
 "The defect is unpatched at the time of writing, the derivation is deterministic, and the algorithm is publicly readable," the&nbsp;XRP Healthcare development team warned.
</blockquote>
<h3 id="trending-on-thestreet-roundtable">Trending on TheStreet Roundtable:</h3>
<ul>
 <li><a href="https://www.thestreet.com/crypto/markets/mcdonalds-deletes-viral-post-over-controversial-intern-claim" rel="noopener noreferrer nofollow">McDonald’s deletes viral post over controversial intern claim</a></li>
 <li><a href="https://www.thestreet.com/crypto/markets/circle-stock-slips-despite-new-acquisition-news" rel="noopener noreferrer nofollow">Circle stock slips despite new acquisition news</a></li>
 <li><a href="https://www.thestreet.com/crypto/markets/strategy-ceo-says-never-sell-was-just-a-marketing-slogan" rel="noopener noreferrer nofollow">Strategy CEO says 'never sell' was just a marketing slogan</a></li>
</ul>
The team first <a href="https://x.com/XRPHealthcare/status/2095769643335971287" rel="noopener noreferrer nofollow">acknowledged</a> the exploit on X on Sep. 4 when it rejected any rug pull claim and admitted the theft of XRPH,&nbsp;XRPHAI, and other assets from compromised XRPH Wallets. It also&nbsp;<a href="https://x.com/XRPHealthcare/status/2095769480726991166" rel="noopener noreferrer nofollow">asked</a>&nbsp;users to not use the wallet until further notice.
On Sep. 5, it <a href="https://x.com/XRPHealthcare/status/2096331340526588075" rel="noopener noreferrer nofollow">said</a> it has filed a formal report with law enforcement and is working with other crypto platforms to freeze the stolen assets.
On Sep. 6,&nbsp;XRP Healthcare <a href="https://x.com/XRPHealthcare/status/2096545422164537417" rel="noopener noreferrer nofollow">revealed</a> that the stolen funds have been traced end-to-end and approximately 445,198 DAI remains in an <a href="https://www.thestreet.com/crypto/ethereum" rel="noopener noreferrer nofollow">Ethereum</a> address. It also asked users to submit loss reports on&nbsp;Etherscan.
<blockquote class="twitter-tweet">
 4,011 wallets. One address. Three hours. It did not exist an hour earlier. It received the entire balance of 4,011 XRPH Wallet users: 267,664 XRP and 23.2M XRPH. Today it is 445,198 DAI on Ethereum, unmoved. Every step, every hash: <a href="https://t.co/AlQoQ6pQiL" rel="noopener noreferrer nofollow">https://t.co/AlQoQ6pQiL</a> 1/2 <a href="https://t.co/l5Og1Fn4Cd" rel="noopener noreferrer nofollow">pic.twitter.com/l5Og1Fn4Cd</a>— xrpl.to (@xrplto) <a href="https://x.com/xrplto/status/2096320784738259080?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 5, 2026</a>
</blockquote>
As per the onchain analytics platform&nbsp;<a href="https://x.com/xrplto/status/2096320784738259080" rel="noopener noreferrer nofollow">xrpl.to</a>, the&nbsp;4,011&nbsp;XRP Healthcare&nbsp;wallets that got compromised lost&nbsp;267,664 <a href="https://www.thestreet.com/crypto/tag/xrp" rel="noopener noreferrer nofollow">XRP</a> and 23.2 million XRPH tokens.
<a href="https://www.thestreet.com/crypto/lifestyle/strategy-just-dropped-250-bitcoin-jordans-with-one-big-catch" rel="noopener noreferrer nofollow">Related: Strategy just dropped $250 'Bitcoin' Jordans with one big catch</a>

XRP Healthcare says 3-year-old bug drained 4,011 crypto wallets

Table of Contents

TheStreet Roundtable

Other articles published on Sep 9, 2026

Join our free newsletter for daily crypto updates!