Should I spread my XRP across several exchanges and wallets?

The full answer

Spreading XRP across several places is a way to limit how much one failure can take. It works only as far as the places are separate from each other. This page sets out what the cited sources show and marks where the answer rests on reasoning (Analysis).

Can one failure take a large amount at once?

Exchange custody is one place where XRP concentrates. XRP Insights reported on September 26, 2026 that publicly attributed exchange wallets held 21.14 billion XRP, a figure it calls a verified floor because only attributable wallets are counted [2].

A single event at one platform can be large. 24/7 Wall St reported on September 27, 2026 that Bitget had reported the loss of 103 million XRP on September 24 in a breach linked to North Korea [1]. The same outlet reported that hackers took $351.6 million from Bitget [1]. What that meant for customer balances is covered on the page about the September 2026 Bitget theft and customers’ funds, and the general mechanisms on how exchanges get hacked.

See the separate page on the D’CENT wallet drain. As of September 30, 2026, no primary source is cited here for the details of that incident.

Do professional holders split their XRP?

One regulated fund does divide custody. Canary XRP ETF’s Form 10-Q for the quarter ended June 30, 2026 names two custodians, Coinbase Custody Trust Company and BitGo Trust Company [3]. The filing says the custodians are responsible for safekeeping all the Trust’s XRP allocated to each of them [3]. The filing extract reviewed does not say why the fund uses two custodians or how the XRP is divided.

Allocation to two custodians means a failure confined to one custodian does not reach the XRP allocated to the other. That benefit depends on the two custodians’ systems not sharing a common weak point.

When do split holdings fail together?

Analysis. Splitting protects only against failures that stay inside one part. The common cases where parts are not separate:

• Several addresses restored from one recovery phrase. Whoever obtains the phrase can restore every address it generates, so for risk purposes they are one wallet.
• Several wallets in one app or on one phone. A flaw in that app, or loss of that phone, reaches all of them.
• Several exchange accounts behind the same email address, password or phone number. A takeover of that email or number reaches each account; the phone-number route is covered on SIM-swap theft.
• Backups kept together. One fire, flood or burglary reaches every copy.

How do I make each part fail independently in practice?

Analysis. The test for each part is whether the event that breaks it can also reach the others. Applied to each layer:

• Recovery phrases: each self-custody wallet with its own phrase, generated separately, not several addresses under one phrase. Storage methods are covered on keeping XRP keys and recovery phrases safe.
• Software and devices: wallets from different makers or on different devices, so one flawed app or one lost phone does not reach all of them. How to pick and verify a wallet is covered on choosing a wallet safely.
• Platforms: separate exchange accounts with separate passwords and separate second factors, as described on securing a crypto platform account.
• Custody types: some holdings with a platform and some in self-custody, so that one platform failure and one wallet flaw do not reach the same XRP. The trade-offs are set out on exchange or own wallet.
• Ledger-level controls: the XRP Ledger’s own account controls are covered on the XRP Ledger account security features page.
• Backups: stored in different physical places.

Each separation removes one shared point of failure and adds one more item to track.

What does splitting add?

Analysis. Every added wallet or platform brings:

• another phrase or login to protect, and another backup to store;
• another set of transactions to record, covered on crypto tax records to keep;
• where the platform checks identity, another company holding the holder’s personal records, covered on limiting the personal data that links a person to crypto;
• another piece that heirs must know exists and be able to reach, covered on what happens to XRP at death.

What is the strongest case against splitting?

Analysis. The case against is that spreading holdings trades a small number of large theft risks for a larger number of small loss risks. A forgotten wallet, a misplaced phrase or an account nobody else knows about can lose XRP without any attacker, which is the subject of losing XRP without being hacked. As of September 30, 2026, no authoritative data is known that compares losses among holders who split their XRP with losses among holders who keep it in one place, so neither position can be settled on current evidence.