Where should I keep my XRP: on the exchange or in my own wallet?

The full answer

What does the record show for XRP held on an exchange?

On September 24, 2026, Bitget reported the loss of 103 million XRP in a breach. 247 Wall St described the breach as linked to North Korea in its September 27, 2026 report [1]. The same outlet put the total taken from Bitget at $351.6 million. It reported that a large part of that sum sat beyond the reach of any organisation that might try to stop the thieves [1]. Bitget said on September 24, 2026 that user funds are safe and that the loss falls within the coverage of its User Protection Fund, which it said holds over $464 million [8]. The incident has its own page on what happened in the September 2026 Bitget theft and whether customers’ funds were affected.

The Bitget report shows that a platform holding XRP can lose a large amount of it in one breach, whatever each customer does with their own login. This follows from the 247 Wall St report [1]. Account-level defences are a separate layer, covered on how to secure an account on a crypto trading platform.

A platform’s failure can also be financial rather than technical. Ripple’s September 15, 2026 post cited “the very painful results of FTX and Sam Bankman-Fried” when arguing for a federal market structure law [6]. What happens to customer coins in an insolvency is set out on what happens to XRP if the exchange goes bankrupt.

Does US law protect XRP held on a platform?

On September 15, 2026, Ripple wrote that the Clarity Act, the federal crypto market structure bill, failed to advance in the Senate [6]. FinTech Weekly reported that the cloture motion failed 49 to 50 [5]. Ripple said it had advocated since 2019 for a framework that gives consumers meaningful protections [6]. It also wrote that the US digital asset market continues to operate without a durable statutory framework [6].

US platform customers cannot count on the consumer protections that Ripple said the bill would have provided, because the bill did not advance. This follows from [5] and [6]. The rules for Canadian platforms are covered on what rules a Canadian crypto platform must follow to hold XRP.

What does the record show for XRP held in my own wallet?

As of September 30, 2026, the sources cited here do not document a self-custody failure. That gap is a limit of the evidence. It is not a finding that self-custody is safe. The D’CENT wallet app reports, such as Blockhead’s September 23, 2026 article linking a flaw to stolen XRP, are not yet confirmed as a documented self-custody failure. They will be set out on the D’CENT wallet page once primary reporting is available. How to pick software or a device is covered on choosing a wallet safely. The difference between wallet types is covered on hot, cold and paper wallets.

Is an XRP ETF a third option that avoids both risks?

Three US spot XRP fund filings (Franklin, Canary and Bitwise) each name custodians for the fund’s XRP: Coinbase Custody Trust Company in all three, and BitGo Trust Company additionally for Canary. The Form 10-Q cited here names Coinbase Custody Trust Company, LLC as the XRP Custodian responsible for safekeeping the XRP owned by the fund it covers [2]. The Canary XRP ETF’s 10-Q for the same quarter names Coinbase Custody Trust Company and BitGo Trust Company as custodians responsible for safekeeping the trust’s XRP [3]. The Bitwise XRP ETF’s Form 10-Q states that the trust’s XRP is held in a custody account in the trust’s name with Coinbase Custody Trust Company, LLC [4].

On September 27, 2026, 247 Wall St wrote that the Bitget loss made regulated funds look more appealing to some investors. It added that there was no evidence connecting the hack to any specific fund inflows [1].

An ETF does not remove custody risk. It moves that risk to the fund and its named custodians, and the fund holder owns fund shares, not XRP in an account of their own. This follows from [2], [3] and [4]. The comparison is covered on whether owning an XRP ETF is the same as, or safer than, owning XRP.

What is the strongest case against keeping XRP on a platform?

The Bitget loss is the strongest evidence cited here [1]. It came from a breach at the platform itself. The mechanics of such breaches, including at platforms that use cold storage, are on how crypto exchanges get hacked. As of September 30, 2026, the sources cited here do not support a case against self-custody. For that reason this page does not rank the two choices.

Can the XRP be split between the two, and what happens to it after death?

Splitting a holding between a small, quickly reachable balance and a larger offline one is covered on how much to keep hot versus cold. Spreading XRP across several providers is covered on spreading XRP across wallets and exchanges. How heirs reach XRP under each arrangement is covered on what happens to XRP at death.