Wallet dossier

XRPH Wallet

softwarelimited

XRPL mobile wallet from XRP Healthcare, launched in 2023 and marketed as non-custodial. After a mass unauthorized drain on 2026-09-03, XRP Healthcare told users not to use the wallet until further notice while the compromise was investigated.

Developer / company: XRP Healthcare
Origin: —
Launch: 2023
Custody: unknown
Confidence: high
Last verified: 2026-09-06

Product family

Products

mobile_applimited

XRPH Wallet Mobile2026-09-06

XRPL mobile wallet for XRP Healthcare ecosystem assets. The application remained distributed through iOS and Android surfaces in September 2026, but XRP Healthcare warned users not to use it after unauthorized transactions affecting the wallet population.

Chronology

Lifecycle timeline

2026-09-03

unauthorized_accesscritical

Mass unauthorized drain affected XRPH Wallet users

Product: XRPH Wallet Mobile

Beginning at 22:07 UTC on 2026-09-03, XRPH Wallet accounts were swept into a newly created collector address. XRP Healthcare reported 4,011 affected wallets and later warned users not to use XRPH Wallet until further notice. Independent ledger reconstruction identified 4,010 victim senders after excluding the attacker's collector-funding transaction and traced the stolen value through XRPL and NEAR Intents into approximately 445,198 DAI on Ethereum.

Funds affected: yesAction: move_funds, rotate_seed, monitorEvidence: 3

2026-09-05

seed_key_exposurecritical

Forensic analysis found seed transmission in XRPH Wallet staking flows

Product: XRPH Wallet Mobile

Forensic analysis of XRPH Wallet Android build 8.0.15 found that seed material was stored unencrypted in the app's local database and that staking/unstaking code transmitted the user's seed to an XRP Healthcare server. The same investigation found 1,225 wallets that had staked through the app and 1,198 of them among the drained wallets.

Scope: key_storageFunds affected: unknownAction: move_funds, rotate_seed, monitorEvidence: 2

Sources