หหห$๐ธหหห 12,4 MILLION OF
$XRP FUNDS DRAINEDโ๐ฅ๐ธโค
(โโธ โ)๐ง The DโCENT App Wallet case turned out to be much bigger than it initially seemed.
In the first identified episode, approximately:
๐ฐ 2,009 million XRP
๐ฅ 1,552 wallets
โฑ๏ธ a little over 2 hours
were hit on September 15.
But new analyses of the XRP Ledger traced several subsequent waves.
According to XRPL.to, by September 25 the same operator had reached:
๐ฅ 12.402.589 XRP
๐จ 7.393 wallets
๐๏ธ 6.095 deleted accounts
๐ 6,27 million of
$XRP converted via THORChain
And thereโs a scary detail:
The transactions were signed with the attackersโ affected walletsโ own keys.
This indicates that the attacker apparently already had access to the necessary credentials before the withdrawals, but the exact way those keys were obtained has not been publicly confirmed yet.
DโCENT acknowledged abnormal transfers involving its App Wallet and advised potentially affected users to move the assets to a wallet created with a new recovery phrase.
โ ๏ธ The company states it has not confirmed compromise originating directly from its hardware wallets.
But thereโs a critical exception:
If the same seed from a hardware wallet was previously entered into the App Wallet, that wallet should also be treated as potentially exposed.
๐ฉ๐ปโ๐ซThe lesson is Brutal:๐จ๐ปโ๐ซ
๐คฆ๐ฝโโ๏ธHARDWARE WALLET DOESNโT PROTECT A SEED THAT HAS ALREADY BEEN EXPOSED IN SOFTWARE.
Rip ๐ IF THE KEY IS THE WALLET, WHERE DO YOU STORE YOUR SEED?
#XRPHACKED #CryptoSecurity