Nearly $20 million in XRP drained from 6,678 wallets across six attack waves
XRPL.to traced 11.75 million XRP, worth about $18.68 million, drained from 6,678 wallets in six waves between Sept. 15 and 20. Transactions were signed with the affected accounts’ keys, but investigators have not established how the keys were obtained, and DCENT has not disclosed the technical cause. Stolen funds moved through THORChain, unionchain.ai, NEAR Intents and Binance-linked deposits; about 1.31 million XRP remained in wallets linked to the operation at the investigator’s snapshot. DCENT is coordinating with law enforcement and other services to trace funds and seek freezes, but no recovery has been announced. It urges potentially affected users to update the app and migrate assets to a wallet created with a new recovery phrase, and warns against recovery scams.
