An urgent security warning has been issued to the XRP community by XRP Healthcare, an AI healthcare platform built on the XRP Ledger. The alert goes out to users of XRPH Wallet following reports of multiple unauthorized transactions.
In an X post, XRP Healthcare stated that it was aware of multiple unauthorized transactions affecting XRPH Wallet users, involving XRPH, XRPHAI, and other assets, and the significant market impact that has followed.
The AI healthcare platform added that its development team is urgently investigating how the wallets were compromised, tracing affected transactions on-chain, and working with relevant parties regarding the possible freezing and recovery of affected assets.
In light of the recent development, users of the XRPH wallet have been urged to stop using it until further notice.
You Might Also Like
XRP Healthcare confirms that multiple users have reported transactions they did not authorize, creating an urgent need to establish how access was obtained and whether there was a common vulnerability. It promises to share further information as soon as this is confirmed, but for now the magnitude of losses or the real cause of the incident has not yet been ascertained.
XRPH wallet is a less popular and relatively new wallet in the XRP ecosystem compared to the likes of Xaman (formerly Xumm), a specialized self-custody software wallet.
Wallet users urged to stay alert
2026 has already produced major DeFi exploits, exchange breaches, wallet data breaches, and a cold storage failure as seen in the recent Coldcard incident.
You Might Also Like
The Coldcard incident reinforced that self-custody relocates risk rather than eliminating it and that a wallet is only as trustworthy as the process that generated its key, making firmware and entropy generation just as critical to scrutinize as the device itself.
In a fresh update, Trezor hardware wallet shared that its recent data breach affected more customers than originally thought.
Trezor said the details, including name, email, phone number, shipping address, and order number, of 67,000 US customers who ordered between November 2019 and August 2021 had also been exposed.