XRP Ledger (XRPL) has recorded a 545% month-over-month increase in new accounts, but the surge may not be a bullish sign.
According to on-chain data from XRPScan, a leading XRPL block explorer, the network recorded 11,610 new addresses on Sept. 24, 2026.
This marked the highest daily account creation figure since Feb. 10, when the XRPL recorded 14,857 new accounts. As a result, the latest figure represents a seven-month high in daily wallet creation.
The increase in new accounts may have a link to the ongoing D’CENT App Wallet exploit, which has drained nearly 12 million XRP. The attackers have taken millions of XRP from thousands of D’CENT App Wallet accounts after gaining access to victims’ private keys.
Notably, a signing flaw in older versions of D’CENT’s mobile App Wallet allowed attackers to obtain or control the recovery phrases or keys of affected users. The issue mainly affected users who had entered a recovery phrase into the app and then used it to sign transactions.
Once the attackers gained access to the keys, they created brand-new collector wallets, which were fresh addresses that had not existed before the attacks.
The attackers then used automated scripts, along with some manual transfers, to move victims’ funds into these new wallets in several waves.
They also deleted many accounts after emptying them, and this allowed them to claim the remaining reserve balances and transfer those funds to their newly created addresses. The attackers later swapped a large portion of the stolen XRP for Ethereum.
The creation of these collector wallets may explain why the number of new XRPL accounts has risen in recent times. Meanwhile, account deletions have also increased, providing another sign that the recent activity could relate to the D’CENT exploit.
#CryptoNewss
According to on-chain data from XRPScan, a leading XRPL block explorer, the network recorded 11,610 new addresses on Sept. 24, 2026.
This marked the highest daily account creation figure since Feb. 10, when the XRPL recorded 14,857 new accounts. As a result, the latest figure represents a seven-month high in daily wallet creation.
The increase in new accounts may have a link to the ongoing D’CENT App Wallet exploit, which has drained nearly 12 million XRP. The attackers have taken millions of XRP from thousands of D’CENT App Wallet accounts after gaining access to victims’ private keys.
Notably, a signing flaw in older versions of D’CENT’s mobile App Wallet allowed attackers to obtain or control the recovery phrases or keys of affected users. The issue mainly affected users who had entered a recovery phrase into the app and then used it to sign transactions.
Once the attackers gained access to the keys, they created brand-new collector wallets, which were fresh addresses that had not existed before the attacks.
The attackers then used automated scripts, along with some manual transfers, to move victims’ funds into these new wallets in several waves.
They also deleted many accounts after emptying them, and this allowed them to claim the remaining reserve balances and transfer those funds to their newly created addresses. The attackers later swapped a large portion of the stolen XRP for Ethereum.
The creation of these collector wallets may explain why the number of new XRPL accounts has risen in recent times. Meanwhile, account deletions have also increased, providing another sign that the recent activity could relate to the D’CENT exploit.
#CryptoNewss