Unauthorized Transactions Affect XRPH Wallet Users
On September 3, 2026, unauthorized transactions impacted approximately 4,011 XRPH Wallet accounts, resulting in a loss of about $452,000. The stolen funds were bridged to Ethereum and converted to DAI, which remains in a single address.
On the evening of September 3, 2026, approximately 4,011 user accounts of the XRPH Wallet experienced unauthorized transactions involving XRPH, XRPHAI, and other assets. This incident resulted in a total loss of roughly $452,000. The project has confirmed that there was no issue with the XRP Ledger itself, indicating that the problem lies elsewhere in the wallet's infrastructure.
The mechanism involved in the theft included collecting the stolen funds, bridging them via NEAR Intents to the Ethereum blockchain, and converting them into approximately 445,198 DAI. This conversion suggests a methodical approach to obfuscate the stolen assets by moving them across different chains.
The DAI remains unmoved in one address, which may provide a point of interest for any future investigations. The XRPH Wallet team has taken the application offline as part of their response to the incident and is currently conducting an investigation to determine the specifics of the breach.