TLDR
Two separate incidents are driving urgent warnings for XRP (XRP) holders, but neither is a direct hack of the XRP Ledger itself.
- A continuing D'CENT App Wallet drain has stolen about 12.4 million XRP from more than seven thousand self custody wallets, prompting strong alerts not to reuse old app addresses.
- Separately, exchange Bitget suffered a $351.6 million hot wallet breach where roughly 103 million XRP, worth about 157 million dollars, was the single largest asset taken.
- XRP holders mainly need to check exposure to D'CENTs app, follow official migration guidance, and watch Bitget updates and large on chain moves rather than panic about a protocol level flaw.
Deep Dive
1. D'CENT Wallet Drain And Holder Alert
Analytics and media reports describe an ongoing D'CENT App Wallet incident where around 12,402,589 XRP has been drained from 7,393 XRP Ledger wallets, with new thefts still occurring after initial warnings.TokenPost report details that some wallets were emptied, refilled and emptied again, showing that compromised keys remained in use.
An alert from D'CENT and ecosystem coverage stress that this is a key compromise affecting the apps software wallet, not a bug in XRPL, and that users should stop sending XRP to old app addresses and migrate to new wallets created with fresh recovery phrases.U.Todays alert also warns about phishing emails pushing fake updates.
If you have ever used the D'CENT App Wallet, especially entering your recovery phrase into the app, your main task is to verify exposure and follow D'CENTs official steps, rather than worrying about XRP itself being broken.
2. Bitget XRP Hot Wallet Exploit
On the venue side, Bitget detected unauthorized transfers from parts of its hot and warm wallet infrastructure, totaling about 351.6 million dollars, including 102,926,478 XRP valued around 157.48 million dollars.Incident coverage notes that XRP was the largest single asset drained and that withdrawals were suspended while trading and deposits continued.
Further analysis shows that almost all of the stolen XRP sits in a small set of new wallets and cannot be frozen at the ledger level because native XRP does not support issuer freezes.Bitcoin.coms breakdown explains that Bitget plans to cover losses from a protection fund, so customer balances should be made whole if the exchange delivers on those commitments.
This is an exchange custody failure, not an XRP Ledger exploit, but it adds short term venue and liquidity risk if attackers start selling large amounts.
3. Practical Risks And What To Watch
For individual XRP holders, the direct risk is highest if you used D'CENTs app based wallet and have not yet migrated, since compromised keys allow ongoing drains even when wallets are refilled.U.Todays guidance highlights the need to update only from official stores and treat unsolicited update emails as scams.
Market wide, the stolen XRP from Bitget represents a large chunk of one days trading volume, so any rapid dumping could temporarily stress liquidity and price, even though the protocol is unaffected.Yahoo Finance coverage notes that most of the haul is still idle, with customer reimbursement planned.
The core XRP network continues to function, but wallet hygiene and venue choice matter; watching official D'CENT posts, Bitgets withdrawal status, and unusually large on chain XRP flows is more useful than reacting to rumors.
Conclusion
The current XRP wallet drain narrative is really about two separate custody failures, one in a specific app wallet and one in an exchanges hot wallet infrastructure. XRP itself is not the attack vector, yet the amounts involved are large enough that poor key management and backend security can still translate into real losses and potential market pressure. The most informed response is to verify your own wallet setup, stay aligned with official security guidance, and monitor how quickly exchanges and affected providers contain and remediate these incidents.
CoinsKid.Com