NEW DATA: Hacker Moves $83 Million in Stolen XRP from Bitget Across Multiple Wallets
Nearly 103 million XRP was stolen and distributed across five primary accounts. Two of the original wallets that each held around 20 million XRP have been almost completely drained, indicating that the attacker is deliberately fragmenting the supply before routing the funds toward liquidity venues.
Unlike stablecoins such as USDT or USDC — where issuers can unilaterally freeze funds via smart-contract controls — native assets like XRP require far more complex coordination to intercept. The hacker is exploiting market liquidity depth and delays in real-time monitoring at centralized exchanges to gradually move the assets without immediately triggering automated risk alerts.
The roughly $320,000 in related stablecoins that have been frozen looks insignificant next to the tens of millions of dollars in XRP that continue to move. This contrast highlights a clear asymmetry in incident response: centralized freezes work effectively only within the “safe zone” of stablecoins. For native assets, the race to contain the outflow depends entirely on how quickly addresses can be labeled and how effectively exchanges can block outgoing transfers.
With approximately $75 million in XRP still sitting in wallets that have not yet moved, the market faces a significant test in the coming days — both in its ability to absorb potential selling pressure and in the effectiveness of cross-chain security monitoring networks.
FOLLOW ME to receive information new best
Nearly 103 million XRP was stolen and distributed across five primary accounts. Two of the original wallets that each held around 20 million XRP have been almost completely drained, indicating that the attacker is deliberately fragmenting the supply before routing the funds toward liquidity venues.
Unlike stablecoins such as USDT or USDC — where issuers can unilaterally freeze funds via smart-contract controls — native assets like XRP require far more complex coordination to intercept. The hacker is exploiting market liquidity depth and delays in real-time monitoring at centralized exchanges to gradually move the assets without immediately triggering automated risk alerts.
The roughly $320,000 in related stablecoins that have been frozen looks insignificant next to the tens of millions of dollars in XRP that continue to move. This contrast highlights a clear asymmetry in incident response: centralized freezes work effectively only within the “safe zone” of stablecoins. For native assets, the race to contain the outflow depends entirely on how quickly addresses can be labeled and how effectively exchanges can block outgoing transfers.
With approximately $75 million in XRP still sitting in wallets that have not yet moved, the market faces a significant test in the coming days — both in its ability to absorb potential selling pressure and in the effectiveness of cross-chain security monitoring networks.
FOLLOW ME to receive information new best