Philippines-based exchange appears to have lost 12.2 million XRP in possible exploit

Quick Take

  • The Philippines-based crypto exchange lost 12.2 million XRP tokens in what appears to have been an exploit on Tuesday. 
  • A hacker appears to have sent XRP tokens through OKX, WhiteBIT and two non-custodial exchanges, among other destinations. 
  • A person familiar with the matter confirmed the security incident to The Block. 

The Philippines-based crypto exchange appears to have experienced an exploit on Tuesday that resulted in the loss of more than 12 million XRP -2.25% tokens ($6 million). 

Within about 30 minutes, a supposed hacker exchanged 999,999.999 XRP lots 13 times, in addition to another lot of 200,000 XRP, according to the blockchain explorer XRP scan.

Exploit on the crypto exchange Image: XRP Scan

However, it appears that one of the transactions didn't go through. 

Exploit on the crypto exchange, including what appears to be a rejected transaction. Image: XRP Scan

After gaining nearly 12.2 million XRP tokens, the hacker then sent the coins through the crypto exchange OKX, the European crypto-to-fiat exchange WhiteBIT, the cross-blockchain exchange OrbitBridge, the crypto exchange SimpleSwap, two non-custodial exchange ChangeNOW and Fixed Float, as well as other destinations. 


Keep up with the latest news, trends, charts and views on crypto and DeFi with a new biweekly newsletter from The Block's Frank Chaparro

By signing-up you agree to our Terms of Service and Privacy Policy
By signing-up you agree to our Terms of Service and Privacy Policy

A few places where the exploiter sent XRP. Image: XRP Scan did not immediately respond to a request for comment from The Block.

"WhiteBIT, as soon as received a request from the Philippines-based exchange Coins, promptly reacted and blocked 445,000 Ripple," a WhiteBIT spokesperson said in an email to The Block. "In addition, WhiteBIT has reached out to Cristal and Chainalysis, requesting to flag addresses associated with stolen cryptocurrencies."

(Updates to add comment from WhiteBIT; corrects to remove depiction of wallet custody.)

© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

About Author

MK Manoylov has been a reporter for The Block since 2020 — joining just before bitcoin surpassed $20,000 for the first time. Since then, MK has written nearly 1,000 articles for the publication, covering any and all crypto news but with a penchant toward NFT, metaverse, web3 gaming, funding, crime, hack and crypto ecosystem stories. MK holds a graduate degree from New York University's Science, Health and Environmental Reporting Program (SHERP) and has also covered health topics for WebMD and Insider. You can follow MK on X @MManoylov and on LinkedIn.


To contact the editor of this story:
Nathan Crooks at
[email protected]