Product record · XRPH Wallet

XRPH Wallet Mobile

mobile_applimitednot_applicableunknown

XRPL mobile wallet for XRP Healthcare ecosystem assets. The application remained distributed through iOS and Android surfaces in September 2026, but XRP Healthcare warned users not to use it after unauthorized transactions affecting the wallet population.

Launch
2023
Sales
not_applicable
Support
unknown
Variants
Confidence
high
Last verified
2026-09-06

Material concerns

Custody and recovery assumptions

Active support, evidence verification, or product type is not a safety endorsement. Missing custody or recovery metadata is shown as unknown rather than inferred as self-custody.

Custody model
unknown
Key-management model
device_local_seed_with_observed_backend_seed_transmission_in_staking_flows
Independent recovery
Unknown / requires evidence review

Lifecycle

Product timeline

2026-09-03
unauthorized_accesscritical

Mass unauthorized drain affected XRPH Wallet users

Product: XRPH Wallet Mobile

Beginning at 22:07 UTC on 2026-09-03, XRPH Wallet accounts were swept into a newly created collector address. XRP Healthcare reported 4,011 affected wallets and later warned users not to use XRPH Wallet until further notice. Independent ledger reconstruction identified 4,010 victim senders after excluding the attacker's collector-funding transaction and traced the stolen value through XRPL and NEAR Intents into approximately 445,198 DAI on Ethereum.

Funds affected: yesAction: move_funds, rotate_seed, monitorEvidence: 3
2026-09-05
seed_key_exposurecritical

Forensic analysis found seed transmission in XRPH Wallet staking flows

Product: XRPH Wallet Mobile

Forensic analysis of XRPH Wallet Android build 8.0.15 found that seed material was stored unencrypted in the app's local database and that staking/unstaking code transmitted the user's seed to an XRP Healthcare server. The same investigation found 1,225 wallets that had staked through the app and 1,198 of them among the drained wallets.

Scope: key_storageFunds affected: unknownAction: move_funds, rotate_seed, monitorEvidence: 2

Sources

Evidence