The flaw was in $XRP Healthcare’s application code: its algorithm generated seed phrases with low entropy, allowing hackers to reconstruct private keys offline. Later, decompilation of the application revealed an even more serious security violation: the wallet was transmitting users’ seed phrases over the network.
The incident sparked a fierce public debate. On September 6, former developers associated with Ripple, including Matt Hamilton, Vet Goose and Hazard Cookie, all stated that the collapse of the startup, previously known as XRPayNet, had only been a matter of time.
Vet Goose publicly acknowledged that he had personally rejected the team’s grant applications because their documentation contained inaccurate claims about partnerships. He stressed that the healthcare platform had never needed its own token in the first place and described the wallet’s architecture as unprofessional.
Matt Hamilton and Hazard Cookie confirmed that they had identified critical risks and questionable operational practices within the project several years earlier, but the startup’s management had ignored criticism from the community.
In response to the allegations, $XRP Healthcare’s management said it had fully trusted the developers it hired and learned that seed phrases were being transmitted over the network only after the hack. The team called the criticism from Ripple veterans inappropriate but had no technical arguments with which to counter their claims.
Recent statement confirms the project’s final status: liquidation has been deemed inevitable, while continuing operations is considered unviable. The XRPH Wallet applications will remain permanently disconnected from the network. Management is currently discussing withdrawal deadlines with cryptocurrency exchanges, while each trading platform will establish its own exact timeline and rules.
