Incident Summary
Between September 15 and 20, a coordinated attack took place in which 11.75 million XRP (equivalent to nearly $20 million) was extracted from 6,678 hardware wallets.
* Methodology: The attack occurred en masse across six waves.
* Tracking: The breach and the flow of funds were identified and tracked by the XRPL.to platform (reported by NS3.AI).
* Entity involved: The cold wallet brand D'CENT is actively investigating how the users' private keys/signatures were exposed.
* Current status: There is no confirmation that the stolen funds have been frozen or recovered.
* Recommendation: D'CENT urgently urged all users who believe they may be at risk to immediately transfer their assets to a secure address.