Why did XRPLiquid pause its reward distribution system after a wallet security incident?

Confirmed Published October 7, 2026 2 min read

XRPLiquid paused after a security incident affected its reward distribution system. The company stated that on Friday, July 24, its rewards hot wallet and a test wallet were compromised. It announced the pause on its website.

The full answer

What did XRPLiquid say happened?

XRPLiquid stated in its announcement that on Friday, July 24, a security incident affected its reward distribution system, and that the rewards hot wallet and a test wallet were compromised. XRPLiquid stated that on Friday, July 24, a security incident affected its reward distribution system, and that the rewards hot wallet and a test wallet were compromised [1].

This is XRPLiquid’s own account, not an independent finding.

A hot wallet is a wallet connected to the internet so it can send payments quickly. Here, the company says the one used for rewards was compromised, along with a separate test wallet.

Why does the pause follow from the incident?

The announcement ties the pause to the security incident in its headline. The announcement gives no longer chain of reasons. Stopping a system that sends payouts while a compromise is examined is a plain way to limit further damage, but that is my reading, not a stated reason from the company [1].

Is this an independent finding?

No. The only account of the incident is XRPLiquid’s own announcement, so every detail above is the company’s statement. trmlabs.com stated: “Key takeaways A firmware bug from March 2021 weakened seed randomness on some Coldcard wallets, cutting key strength from 128 bits to as little as 40 — brute-forceable without physical access.”

How does this connect to other XRP security stories?

XRPLiquid is a separate service from the XRP Ledger itself. The difference between a company’s product, the XRP token and the ledger is explained in the page on Ripple, XRP and the XRP Ledger. The ledger’s own record of halts and incidents is covered in the page on XRP Ledger outages. A separate case involving an exchange is covered on the Bitget theft page.

What is the opposing view?

A reader weighing wallet risk can point out that hot wallets, by design, hold funds online and so carry exposure that offline storage avoids. The company’s statement does not argue against that. Questions about how XRP was first spread among holders are on the page about the original XRP distribution.

What we know

XRPLiquid stated in its announcement that on Friday, July 24, a security incident affected its reward distribution system, and that the rewards hot wallet and a test wallet were compromised. [1]
The announcement’s headline reads: XRPLiquid pauses after reward wallet security incident. [1]

What we reason Analysis

The announcement links the pause to the incident in its headline, and it names the rewards hot wallet and a test wallet as the compromised parts. Pausing the system that sends rewards is a common way to stop further loss while a compromise is checked. That is my reading of the headline, not a reason XRPLiquid gave in its announcement.

What's still open

As of October 7, 2026, XRPLiquid has not published, in the announcement cited here, an account of how the wallets were compromised.
Has any independent party reviewed the XRPLiquid wallet security incident and reached a finding about what happened and why the reward distribution system was paused?

In plain English

XRPLiquid is a service that hands out rewards. The company said that on Friday, July 24, a security problem hit the system that sends those rewards. Two of its wallets, one used for rewards and one used for testing, were compromised. The company paused the service after that. All of this is the company’s own description of what happened.

Sources

XRPLiquid pauses after reward wallet security incident — XRPLiquid, 2026-07-26 Primary
finance.yahoo.com — finance.yahoo.com, September 25, 2026 Secondary
The Largest Hardware Wallet Exploit of 2026: Inside the USD 116 Million Coldcard Hack — TRM Labs, August 5, 2026 Company-reported

Update log

October 7, 2026 — Published.

I keep this site free, with no ads, paywall or affiliate links; gifts cover hosting and research time. Support the project, or report an error.