XRP Healthcare Vulnerability Leads to Theft of 4,011 Wallets, Resulting in Loss of Approximately $450,000

XRP Healthcare released an incident report on September 8, stating that a wallet generation flaw introduced on June 13, 2023, led to the theft of 4,011 wallets on September 3, resulting in a loss of approximately $450,000 in crypto assets. The stolen wallets collectively lost 267,664 XRP and 23.2 million XRPH tokens. The development team warned that all generated wallets should be considered compromised, and that wallets not affected were only safe due to having no funds; any subsequent deposits would still be at risk of theft. As of the report's release, the vulnerability had not been fixed, and the key derivation algorithm is deterministic and publicly readable. The team acknowledged the incident on September 4 and denied allegations of a rug pull, submitted a formal report to law enforcement on September 5, and collaborated with other crypto platforms to freeze the stolen assets. On September 6, they stated that they had completed a full trace of the funds, with approximately 445,198 DAI still remaining in an Ethereum address.