˗ˋˏ$💸ˎˊ˗ 12,4 MILLION OF $XRP FUNDS DRAINED❓🔥💸⃤
(◞‸ ◟)💧 The D’CENT App Wallet case turned out to be much bigger than it initially seemed.
In the first identified episode, approximately:
💰 2,009 million XRP
👥 1,552 wallets
⏱️ a little over 2 hours
were hit on September 15.
But new analyses of the XRP Ledger traced several subsequent waves.
According to XRPL.to, by September 25 the same operator had reached:
🔥 12.402.589 XRP
🚨 7.393 wallets
🗑️ 6.095 deleted accounts
🌉 6,27 million of $XRP converted via THORChain
And there’s a scary detail:
The transactions were signed with the attackers’ affected wallets’ own keys.
This indicates that the attacker apparently already had access to the necessary credentials before the withdrawals, but the exact way those keys were obtained has not been publicly confirmed yet.
D’CENT acknowledged abnormal transfers involving its App Wallet and advised potentially affected users to move the assets to a wallet created with a new recovery phrase.
⚠️ The company states it has not confirmed compromise originating directly from its hardware wallets.
But there’s a critical exception:
If the same seed from a hardware wallet was previously entered into the App Wallet, that wallet should also be treated as potentially exposed.
👩🏻🏫The lesson is Brutal:👨🏻🏫
🤦🏽♀️HARDWARE WALLET DOESN’T PROTECT A SEED THAT HAS ALREADY BEEN EXPOSED IN SOFTWARE.
Rip 💐 IF THE KEY IS THE WALLET, WHERE DO YOU STORE YOUR SEED?
#XRPHACKED #CryptoSecurity
(◞‸ ◟)💧 The D’CENT App Wallet case turned out to be much bigger than it initially seemed.
In the first identified episode, approximately:
💰 2,009 million XRP
👥 1,552 wallets
⏱️ a little over 2 hours
were hit on September 15.
But new analyses of the XRP Ledger traced several subsequent waves.
According to XRPL.to, by September 25 the same operator had reached:
🔥 12.402.589 XRP
🚨 7.393 wallets
🗑️ 6.095 deleted accounts
🌉 6,27 million of $XRP converted via THORChain
And there’s a scary detail:
The transactions were signed with the attackers’ affected wallets’ own keys.
This indicates that the attacker apparently already had access to the necessary credentials before the withdrawals, but the exact way those keys were obtained has not been publicly confirmed yet.
D’CENT acknowledged abnormal transfers involving its App Wallet and advised potentially affected users to move the assets to a wallet created with a new recovery phrase.
⚠️ The company states it has not confirmed compromise originating directly from its hardware wallets.
But there’s a critical exception:
If the same seed from a hardware wallet was previously entered into the App Wallet, that wallet should also be treated as potentially exposed.
👩🏻🏫The lesson is Brutal:👨🏻🏫
🤦🏽♀️HARDWARE WALLET DOESN’T PROTECT A SEED THAT HAS ALREADY BEEN EXPOSED IN SOFTWARE.
Rip 💐 IF THE KEY IS THE WALLET, WHERE DO YOU STORE YOUR SEED?
#XRPHACKED #CryptoSecurity
