AdvertiseFee Deal Desk

Hack

XRP Healthcare Shutters After $452,000 Wallet Exploit Drains 4,011 XRP Holders

XRP Healthcare shuts down and delists XRPH after a $452,000 exploit drained 4,011 wallets; ex-Ripple engineers had flagged red flags for years.

Be a creator
September 10, 2026, 04:40 PM UTC7 min readUpdated
AI SummaryAI
  • XRP Healthcare is shutting down and delisting XRPH and XRPHAI tokens after a September 3 wallet exploit.
  • Attackers drained 4,011 XRPH wallets for roughly $452,000 in losses, including 267,664 XRP.
  • Former Ripple developers Matt Hamilton, Vet Goose and Hazard Cookie said the project's collapse was long expected.
  • Ripple ex-CTO David Schwartz says an 18x XRP surge is likelier than a Bitcoin collapse to flip market caps.
bybit.com

XRP Healthcare Winds Down After $452,000 Wallet Drain

XRP Healthcare has announced it is ceasing operations entirely and coordinating the delisting of its XRPH and XRPHAI tokens, ending a three-year effort to build a blockchain-based healthcare ecosystem under its earlier identity, XRPayNet. The startup, which pitched itself as an on-chain payments (PayFi) platform for medical services, blamed the prolonged bear market and a failed bid for a public listing — but the immediate catalyst was a technical failure it could not survive. In its official shutdown statement, management confirmed liquidation is unavoidable and that the XRPH Wallet applications will stay permanently disconnected from the network, with withdrawal deadlines now being negotiated individually with each exchange. The trouble began on September 3, when attackers drained 4,011 XRPH wallets for total losses of roughly $452,000, including 267,664 XRP. Subsequent analysis ruled out a flaw in the XRP Ledger itself: the wallet application generated seed phrases with insufficient entropy, allowing hackers to reconstruct private keys offline, and decompilation later exposed a graver lapse — the app was transmitting users' seed phrases over the network. On September 6, former Ripple developers Matt Hamilton, Vet Goose and Hazard Cookie said publicly that the collapse had been only a matter of time; Vet Goose disclosed he had rejected the team's grant applications years earlier over inaccurate partnership claims. Management countered that it had fully trusted its hired developers and learned of the seed-phrase transmission only after the hack.

David Schwartz Puts 18x on an XRP Flip of Bitcoin

Against that backdrop of third-party project failure, one of the XRP Ledger's original architects offered a far more expansive view of the asset itself. David Schwartz, Ripple's former chief technology officer, said during a live X Space that flipping Bitcoin's market cap is more plausible through an XRP rally than through a Bitcoin collapse. “I honestly have to say, I think XRP surging is probably more likely than not,” he said, framing the scenario around an advance of roughly eighteen times. The arithmetic is steep: XRP's market capitalization stands near $87.25 billion, about 5.5% of Bitcoin's size at roughly $78,000 per coin, and the altcoin would still need to overtake Ethereum, Tether and BNB merely to reach third place. Near-term price action offers little support for the thesis — XRP compressed between $1.375 and $1.40 beneath resistance at $1.43–$1.46, with support at $1.34–$1.35 and deeper floors at $1.32 and $1.20, while Bitcoin dominance near 59.05% and an altcoin season index of 39 indicate capital remains parked in BTC. Attention now turns to the Senate's September 15 window for the CLARITY Act and the Fed's September 16 decision as the next potential catalysts for the flip scenario Schwartz outlined.

Kalshi Traders Still Bet on $1.50 This Month

Prediction-market participants are taking the opposite side of the short-term pessimism. Data from the Kalshi contract tracking XRP's maximum monthly price shows traders betting the asset reclaims $1.50 before September ends, with roughly $89,586 in volume already traded on that market — a sign of sustained retail interest despite the ongoing correction. The bullish positioning implies a rally of more than 11% from current levels. XRP has given back its recent gains after stabilizing near $1.40 through last week: over the trailing day the token fell about 4.6%, sliding from a high of $1.43 to around $1.35, and our live spot feed put the 24-hour decline closer to 5% as selling accelerated. The move sits inside the descending-triangle structure analysts have flagged, where a clean break above $1.43 would open a path toward $1.50, while losing $1.32 would invalidate the near-term bullish structure and expose $1.20. Traders positioning on either side of that range can review our beginner guide on where to buy XRP for venue selection and execution basics.

Security Hygiene, Not Supply, Is the Binding Constraint

Fresh details from Schwartz's X Space appearance flesh out the growth case behind his flip thesis: cumulative inflows into US spot XRP ETFs have reached roughly $1.7 billion, and Goldman Sachs appears among the disclosed institutional holders of the asset. The newer readings put XRP's market cap at $86.32 billion against Bitcoin's $1.56 trillion — a gap of about $1.49 trillion that implies an 18x move to roughly $25 per token, a slightly wider spread than the figures cited earlier in the day. Schwartz framed the scenario around XRPL's throughput and native financial functions, recent protocol-level security reviews and node improvements, arguing the ledger's in-house handling of financial logic reduces dependence on external smart contracts for institutional use. He also noted XRP briefly ranked second behind Bitcoin during the 2017–2018 bull run, when its cap hit $86 billion. Readers tracking the market in real time can follow live spot and futures prices on Bitget.

Follow-up details have sharpened the picture of the XRPH Wallet compromise. The company itself pulled the app offline on September 10 to prevent further damage while it investigates, clarifying that attackers did not remove the service, and wallet addresses, balances and transaction history remain visible on the XRP Ledger. Beyond the 267,664 XRP reported earlier, the stolen assets included roughly 23.2 million XRPH and 2.43 million XRPHAI. Analysis via xrpl.to found that while XRPH payments were signed on the phone, seed information was stored unencrypted on the device, and using the staking feature sent the seed to XRP Healthcare's servers — a structure in which 1,198 of 1,225 staking wallets were hit, though 7 of 10 victims reportedly never staked, suggesting wider exposure. The company says it is tracing the stolen funds and working with authorities to freeze and recover assets, while disputing the former Ripple developers' claims.

Additional reporting has clarified the legal and operational shape of the shutdown. No bankruptcy filing, liquidation petition or court-supervised insolvency process accompanied the announcement, and the company has not published its assets, liabilities, cash position or outstanding obligations. It described the move as an “operational wind-down,” with intellectual property and its international trademark portfolio to remain under separate management, though it did not name the holding entity or explain how any sale proceeds would be treated. No consolidated list of participating exchanges or withdrawal deadlines has been released, no police report or enforcement filing was published alongside the notice, and the company has not committed to compensating victims — no frozen deposits, returned funds or arrests have been disclosed. No forensic report with reproducible code analysis has yet been issued by either side.

(as of 17:46 UTC) The day's threads form a single arc: the XRP Ledger's base layer and its largest demand-side narratives remain intact, while the failure point was a third-party application that ignored basic cryptography. The primary record makes the distinction explicit — XRP Healthcare's own final statement concedes the vulnerability lived in its wallet code and that liquidation is inevitable, not any defect in the ledger itself. Schwartz's flip math and Kalshi's $1.50 contract, by contrast, describe scenarios that depend on macro catalysts arriving on schedule. For holders of XRP (XRP), the cross-border settlement asset XRP that anchors this ecosystem, the actionable takeaway is narrower than any flip projection: custody choices and code audits matter more in the near term, and our latest XRP developments hub tracks how the market prices that risk.

COINOTAG's editorial and research desk.

AI-Assisted

AI-generated, AI-reviewed, under COINOTAG editorial oversight.