-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0170
============================================================

Advisory-ID:  0xCERT-2026-0170
Severity:     Critical
Published:    2026-09-15T00:00:00.000Z
Updated:      2026-10-08T22:46:35.501Z
Chains:       Other / Multi-chain, Bitcoin, Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0170

Title: D'CENT App Wallet Key Compromise

Summary
- -------
Attackers used compromised recovery phrases to sweep roughly 11.7 million XRP — about $18 million — from over 6,600 D'CENT App Wallet accounts across five chains.

Details
- -------
Summary
Attackers used compromised recovery phrases to sweep roughly 11.7 million XRP — about $18 million — from over 6,600 D'CENT App Wallet accounts across five chains.

Incident
- - Victim: D'CENT Wallet
- - Date (UTC): 2026-09-15
- - Estimated loss: $18.0M
- - Chain(s): XRP Ledger, Bitcoin, Ethereum, Tron, Stellar
- - Attack type: private key compromise
- - Funds status: stolen

Recommended actions
- - If you use D'CENT Wallet, move funds to a fresh wallet with a new seed phrase once the vendor confirms the root cause
- - Update the wallet software only from official sources
- - Beware of follow-on phishing: ignore unofficial "refund", "recovery", or "claim" links and DMs; use the project's verified channels only

Source & attribution
Full analysis on Blockchain Breaches, 0xCERT's incident archive: https://www.blockchainbreaches.com/en/breaches/dcent-wallet-2026. Primary sources: https://protos.com/the-years-second-largest-xrp-hack-is-spilling-over-to-bitcoin-and-ethereum/ ; https://www.cryptotimes.io/2026/09/21/crypto-hacks-drain-20m-this-week-rseth-safe-nostra-fall/ ; https://thecryptobasic.com/2026/09/17/heres-how-the-dcent-wallet-hacker-drained-2-million-xrp-in-two-hours/.

References
- ----------
- - https://www.blockchainbreaches.com/en/breaches/dcent-wallet-2026
- - https://protos.com/the-years-second-largest-xrp-hack-is-spilling-over-to-bitcoin-and-ethereum/
- - https://www.cryptotimes.io/2026/09/21/crypto-hacks-drain-20m-this-week-rseth-safe-nostra-fall/
- - https://thecryptobasic.com/2026/09/17/heres-how-the-dcent-wallet-hacker-drained-2-million-xrp-in-two-hours/

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrIRqMJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmf1mdxJcKMc+exSmwsm2Y7YQkyJ/Fx43CM81JJM
KHxEjBYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAABXuQD+MXZErvKCVXvC54CQ
DtkyVdmfMUf6aBhO+Wx2856FGtABAKW3Vbwg7Qsi4PLbMQ4h1lWTrjd3fY/l
y5pCuXrFEf8E
=At7D
-----END PGP SIGNATURE-----