TL;DR:
- XRP Healthcare warned XRPH Wallet users to stop using the wallet after multiple unauthorized transactions involving XRPH, XRPHAI and other assets were reported.
- The development team is tracing transactions on-chain, investigating the compromise and working with relevant parties on possible freezing and recovery of affected assets.
- The cause and total losses remain unknown, leaving users without a confirmed explanation while the project continues its security investigation and promises further updates.
XRP Healthcare has issued an urgent security warning after multiple users of its XRPH Wallet reported transactions they said they never authorized, involving XRPH, XRPHAI and other assets. The incident has prompted the project to tell users to stop using the wallet until further notice. The immediate concern is not just that funds moved without approval, but that the route of compromise remains unknown, leaving users without a confirmed explanation for how access was obtained. The team said the episode has already produced a significant market impact, even as the scale of losses remains unclear.
XRPH WALLET SECURITY UPDATE
We are aware of multiple unauthorized transactions affecting XRPH Wallet users, involving XRPH, XRPHAI and other assets, and the significant market impact that has followed.
Our development team is urgently investigating how the wallets were…
— XRP Healthcare (@XRPHealthcare) September 4, 2026
The development team is now tracing affected transactions on-chain and investigating how the wallets may have been compromised. XRP Healthcare also said it is working with relevant parties to explore whether affected assets can be frozen or recovered. The response has shifted quickly from detection to containment, but crucial questions are still unanswered, including whether users were exposed through a shared vulnerability or through separate points of failure. No definitive cause has been established, and the project has not yet disclosed the magnitude of funds affected while its investigation continues.
Wallet Security Questions Intensify Across The XRP Ecosystem
XRPH Wallet is a relatively new and less widely used wallet within the XRP Ledger ecosystem compared with established options such as Xaman, formerly known as Xumm. That limited track record makes the sudden reports of unauthorized transactions especially unsettling for users evaluating newer self-custody tools. XRP Healthcare has promised to provide additional information once its investigation confirms what happened, but for now the guidance is unusually direct: stop using the wallet. The warning underscores how quickly confidence can deteriorate when asset movements appear without user authorization and the technical cause remains unresolved.
The alert arrives during a year already marked by major DeFi exploits, exchange breaches, wallet data incidents and a reported cold-storage failure involving Coldcard. A separate update from Trezor also revealed that a recent data breach affected 67,000 U.S. customers who placed orders between November 2019 and August 2021, exposing personal details. The XRPH Wallet episode adds another reminder that wallet security depends on more than custody labels alone. Until XRP Healthcare determines how the wallets were accessed, users remain dependent on the ongoing forensic review and any recovery actions that become possible while the security review now proceeds under heightened scrutiny.