{"id":13078,"date":"2026-09-11T00:49:24","date_gmt":"2026-09-11T00:49:24","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=13078"},"modified":"2026-09-11T00:49:24","modified_gmt":"2026-09-11T00:49:24","slug":"a-wallet-coding-flaw-just-helped-shut-down-an-entire-xrp-project","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=13078","title":{"rendered":"A wallet coding flaw just helped shut down an entire XRP project"},"content":{"rendered":"<p><\/p>\n<div data-cs-editorial-quote-scope=\"\" data-cs-image-viewer-scope=\"\" data-single-article-content=\"\">\n<p>XRP Healthcare, an healthcare platform build on the XRP Ledger (XRPL), is winding down operations after a wallet flaw exposed thousands of accounts and led to roughly $450,000 in losses.<\/p>\n<p>On Sept. 10, the project said the Sept. 3 XRPH Wallet incident added financial and operational pressure to a business already burdened by development costs, a prolonged crypto bear market and an unsuccessful public-listing effort.<\/p>\n<p>Due to this, the platform said it was preparing to delist its tokens, including XRPH and XRPHAI, with individual exchanges expected to set withdrawal deadlines. The XRPH Wallet applications will remain offline while the company retains its intellectual property and global trademark portfolio.<\/p>\n<p>The shutdown follows a mass sweep that XRPL.to traced across 10,281 payments from 4,011 sender wallets between Sept. 3 and Sept. 4. The analytics service classified 4,010 of those wallets as victims after determining that one sender funded the collector account.<\/p>\n<div class=\"cs-article-embed\">\n<p> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">XRP Ledger developer kit compromised with backdoor to steal wallet private keys<\/h3>\n<\/p>\n<p> <span class=\"cs-article-embed__arrow\" aria-hidden=\"true\"> <i class=\"fa-light fa-arrow-up-right\"\/> <\/span> <\/div>\n<p>About 267,664 XRP, 23.2 million XRPH and 2.43 million XRPHAI were moved into the identified collector, putting the value of the stolen assets at roughly $450,000 to $452,000.<\/p>\n<h2>Wallet flaw collapsed the keyspace protecting user funds<\/h2>\n<p>XRP Healthcare\u2019s developer investigation traced the breach to how XRPH Wallet generated credentials.<\/p>\n<p>The report said the application passed a 55-character value into <code>xrpl.Wallet.fromEntropy()<\/code>, which expected raw bytes. Only the first 16 characters were effectively retained, leaving 14 variable digits and reducing the possible input space to about 72.9 trillion combinations, or roughly 2^46, from the intended 2^128.<\/p>\n<aside id=\"cs-inline-newsletter-1\" class=\"cs-inline-newsletter\" data-inline-newsletter=\"\" data-newsletter-placement=\"article-midpoint\" data-newsletter-pending-label=\"Joining\u2026\" data-newsletter-pending-status=\"Joining the Daily Brief\u2026\" data-newsletter-email-required-message=\"Before sending, please provide your email address.\" aria-labelledby=\"cs-inline-newsletter-1-title\" aria-describedby=\"cs-inline-newsletter-1-copy\">\n<div class=\"cs-inline-newsletter__inner\">\n<div class=\"cs-inline-newsletter__content\"> <span class=\"cs-inline-newsletter__eyebrow\"> <i class=\"fa-regular fa-envelope\" aria-hidden=\"true\"\/> The Daily Brief <\/span><\/p>\n<h2 id=\"cs-inline-newsletter-1-title\" class=\"cs-inline-newsletter__title\">The signal, before the noise.<\/h2>\n<p id=\"cs-inline-newsletter-1-copy\" class=\"cs-inline-newsletter__copy\">Start your day with the crypto stories moving markets, decoded by CryptoSlate\u2019s editors.<\/p>\n<\/div>\n<div class=\"cs-inline-newsletter__form-shell\">\n<p class=\"cs-inline-newsletter__form-heading\">One email. Everything that matters.<\/p>\n<p id=\"cs-inline-newsletter-1-privacy\" class=\"cs-inline-newsletter__privacy\">Free to join. Unsubscribe any time.<\/p>\n<p> <i class=\"fa-regular fa-circle-xmark\" aria-hidden=\"true\"\/> <span>Whoops, looks like there was a problem. Please try again.<\/span><\/p>\n<p> <i class=\"fa-regular fa-circle-check\" aria-hidden=\"true\"\/> <span><strong>You\u2019re on the list.<\/strong> Your next Daily Brief is on its way.<\/span><\/p>\n<\/div>\n<\/div>\n<\/aside>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter wp-image-561627\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress.jpg\" alt=\"Infographic comparing XRPH Wallet's intended 2^128 key space with an effective key space of about 2^46, while noting that the exposure does not prove the attacker's exact route.\" width=\"720\" height=\"405\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress.jpg 1672w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-300x169.jpg 300w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-1024x576.jpg 1024w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-768x432.jpg 768w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-1536x864.jpg 1536w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-480x270.jpg 480w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-1200x675.jpg 1200w\" sizes=\"(max-width: 720px) 100vw, 720px\"\/><img decoding=\"async\" class=\"lazyload aligncenter wp-image-561627\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress.jpg\" alt=\"Infographic comparing XRPH Wallet's intended 2^128 key space with an effective key space of about 2^46, while noting that the exposure does not prove the attacker's exact route.\" width=\"720\" height=\"405\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress.jpg 1672w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-300x169.jpg 300w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-1024x576.jpg 1024w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-768x432.jpg 768w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-1536x864.jpg 1536w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-480x270.jpg 480w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2e7c0dd5-84ba-474a-8758-7141fab7b98e-wordpress-1200x675.jpg 1200w\" data-sizes=\"(max-width: 720px) 100vw, 720px\"\/><\/p>\n<p>The developers also found use of <code>Math.random()<\/code>, which could have reduced the practical search space further.<\/p>\n<p>The team said it reproduced private keys for nine live wallets, including four confirmed drained accounts, using public information and a partial scan of the reduced keyspace. It concluded that the defect explains the Sept. 3 drain without requiring access to user devices or the XRP Ledger protocol.<\/p>\n<p>The weakness also means users cannot secure an exposed wallet simply by importing the same seed into different software. XRP Healthcare has advised affected users to abandon credentials generated through XRPH Wallet and move any remaining assets using newly created keys.<\/p>\n<p>Recovery efforts will continue despite the operational wind-down.<\/p>\n<p>The company said the stolen assets had been traced end-to-end to an Ethereum address holding about 445,198 DAI and asked affected users to submit factual reports on Etherscan using transaction records from their drained wallets.<\/p>\n<p>XRP Healthcare said it will continue working with exchanges, platforms, authorities and other parties while preserving technical and transaction records connected to the incident.<\/p>\n<\/div>\n<p>AI,Featured,Wallets,payments,xrppayments,xrp#wallet #coding #flaw #helped #shut #entire #XRP #project1789087764<\/p>\n","protected":false},"excerpt":{"rendered":"<p>XRP Healthcare, an healthcare platform build on the XRP Ledger (XRPL), is winding down operations after a wallet flaw exposed thousands of accounts and led to roughly $450,000 in losses. On Sept. 10, the project said the Sept. 3 XRPH Wallet incident added financial and operational pressure to a business already burdened by development costs,<\/p>\n","protected":false},"author":1,"featured_media":13079,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[6078,1926,382,5277,167,3010,1389,159,230],"class_list":["post-13078","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum","tag-coding","tag-entire","tag-flaw","tag-helped","tag-payments","tag-project","tag-shut","tag-wallet","tag-xrp"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>A wallet coding flaw just helped shut down an entire XRP project - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"description\" content=\"XRP Healthcare is winding down after thousands of accounts were drained and roughly $450,000 was traced through the exploit.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=13078\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A wallet coding flaw just helped shut down an entire XRP project\" \/>\n<meta property=\"og:description\" content=\"XRP Healthcare is winding down after thousands of accounts were drained and roughly $450,000 was traced through the exploit.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=13078\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-11T00:49:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/xrph-weak-key-exploit.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13078\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=13078\",\"name\":\"A wallet coding flaw just helped shut down an entire XRP project - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13078#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13078#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/xrph-weak-key-exploit.jpg\",\"datePublished\":\"2026-09-11T00:49:24+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"description\":\"XRP Healthcare is winding down after thousands of accounts were drained and roughly $450,000 was traced through the exploit.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13078#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=13078\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13078#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/xrph-weak-key-exploit.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/xrph-weak-key-exploit.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13078#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A wallet coding flaw just helped shut down an entire XRP project\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"A wallet coding flaw just helped shut down an entire XRP project - Crypto News: Latest Cryptocurrency News and Analysis","description":"XRP Healthcare is winding down after thousands of accounts were drained and roughly $450,000 was traced through the exploit.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=13078","og_locale":"en_US","og_type":"article","og_title":"A wallet coding flaw just helped shut down an entire XRP project","og_description":"XRP Healthcare is winding down after thousands of accounts were drained and roughly $450,000 was traced through the exploit.","og_url":"https:\/\/cryptonews.uk.com\/?p=13078","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-09-11T00:49:24+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/xrph-weak-key-exploit.jpg","type":"image\/jpeg"}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=13078","url":"https:\/\/cryptonews.uk.com\/?p=13078","name":"A wallet coding flaw just helped shut down an entire XRP project - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=13078#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=13078#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/xrph-weak-key-exploit.jpg","datePublished":"2026-09-11T00:49:24+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"description":"XRP Healthcare is winding down after thousands of accounts were drained and roughly $450,000 was traced through the exploit.","breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=13078#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=13078"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=13078#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/xrph-weak-key-exploit.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/xrph-weak-key-exploit.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=13078#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"A wallet coding flaw just helped shut down an entire XRP project"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/13078","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=13078"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/13078\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/13079"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=13078"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=13078"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=13078"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}