Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnAISquareMore
Hackers steal $3.05m XRP from cold wallet, ZachXBT traces funds

Hackers steal $3.05m XRP from cold wallet, ZachXBT traces funds

Crypto.NewsCrypto.News2025/10/19 16:00
By:By David MarsanicEdited by Jayson Derrick

Crypto investigator ZachXBT traced the funds of a victim who lost their life savings of $3.05 million in XRP.

Summary
  • A victim lost their life savings of $3.05M worth of XRP from an Ellipal cold wallet
  • The hack happened after the victim imported their seed phrase into Ellipal’s mobile app
  • ZachXBT traced the funds to a Southeast Asian laundering ring

Self-custody is a powerful tool for security, but only if users know what they are doing. On Sunday, Oct. 19, crypto investigator ZachXBT revealed a case of a victim losing $3.05 million in XRP from a cold wallet. The investigator ultimately traced the funds to a Southeast Asian crypto laundering ring.

The initial theft happened on Oct. 12, when attackers drained the victim’s (XRP) wallet. The victim used an Ellipal hardware wallet, which markets itself as a cold wallet. However, the victim made the mistake of importing their seed phrase into the Ellipal mobile app.

This effectively made it into a hot wallet, meaning it became connected to the internet. ZachXBT explained that importing a seed phrase into a mobile app completely defeats the purpose of cold storage and exposes users to hacks.

How hackers laundered $3.05 in XRP

Following the breach, hackers used the cross-chain bridge Bridgers to swap the XRP into Tron (TRX) in over 120 transactions. The transactions appeared to go to Binance, but this was actually part of Bridgers’ liquidity path.

After the laundering steps, the attackers moved all tokens into a single Tron wallet, making it easier to move the funds off-chain. For that purpose, they used OTC desks adjacent to Huione, a Southeast Asia–based illicit online marketplace.

According to ZachXBT, Huione has connections to hacks, pig-butchering scams, money laundering, and more. The exchange has also been sanctioned by the U.S. government for facilitating massive illicit crypto flows.

0
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

Understand the market, then trade.
Bitget offers one-stop trading for cryptocurrencies, stocks, and gold.
Trade now!

You may also like

VIPTradFi Focus: Where Does the RWA Market Stand Today?

1. Crypto outperformed traditional equity indexes following the rate hike, but elevated interest rates remain a key constraint on cross-asset allocation. From September 12 to 18, BTC, ETH, and SOL gained 4.83%, 3.84%, and 9.96%, respectively, while the S&P 500 edged down 0.08%. The U.S. Dollar Index rose 1.11%, and the 10-year U.S. Treasury yield closed at approximately 4.998%. Improving risk appetite is therefore coexisting with elevated discount rates, raising the bar for RWA allocation: investors need to compare not only returns on the underlying assets, but also on-chain liquidity and collateral efficiency. 2. Growth in tokenized equities is occurring even as the overall RWA market remains under pressure. As of September 18, Distributed Asset Value across RWAs stood at $38.503 billion, down 1.13% week over week, while tokenized equities reached $3.056 billion, up 6.03%. This week's data are better explained by capital reallocating across different RWA segments than by a broad-based expansion of the entire RWA market. 3. For exchanges, the opportunity lies in connecting spot holdings, collateral, and derivatives. Reality's distributed asset value stands at approximately $155 million, while eligible rTokens can already be used within Bitget's UTA margin framework. Across CoinGlass's verifiable sample of 177 TradFi instruments, open interest reached approximately $11.498 billion, up 2.06% week over week, even as weekly trading volume declined 7.60%. The medium-term opportunity remains intact, but deeper utilization will depend on liquidity, collateral use, and sustained trading activity. 4.Assets to watch: BTC, ETH, SOL, NEAR, ZEC, gold, tokenized U.S. equities, COST. 5.Key metrics to watch: rToken collateral utilization, the durability of TradFi open interest and trading volume, and next week's employment and consumer data.

Bitget2026/09/21 06:38
TradFi Focus: Where Does the RWA Market Stand Today?