Detailed follow-up / thread draft I lost $100k+ in XRP and XLM. Here are the facts so far. Stellar (XLM) drain Transaction: stellar.expert/explorer/publ… Time: 23 Sep 2026, 03:38:03 UTC Status: Successful Operation: create_account Amount sent to the new account: 17,244.391065 XLM (~$3,700 at ~$0.216) Fee: 0.00001 XLM This is a classic sweep: the source account used its own keys to fund a fresh destination account. XRP Ledger drain Transaction: bithomp.com/tx/C05D75AE051D2… This is the bulk of the loss. Combined with the XLM movement it is well over $100k at current prices (XRP ~$1.60). Context This matches the pattern of the D’CENT App Wallet unauthorized transfers that started 15 Sep 2026. On-chain tracking has shown multiple waves totaling ~11.7 million XRP from 6,000+ wallets whose recovery phrases had been entered into the D’CENT software App Wallet (versions before 8.1.0). D’CENT has said hardware wallets themselves are not confirmed compromised, but anyone who imported a seed into the App Wallet is exposed. D’CENT supports both XRPL and Stellar, so both assets can leave the same compromised key. blockhead.co D’CENT first flagged abnormal transfers on 16 Sep, told users to update the app and move funds to new recovery phrases, and said they are working with Korean law enforcement and asking exchanges to freeze funds. Some drains have continued after the main waves as remaining keys are used. What I am asking @chainalysis @trmlabs @DOJFraudDiv @XRPLF @StellarOrg @DCENTWALLETS Please review these two transactions, identify the destination / collector addresses, and help flag or freeze any funds that have not yet been swapped off-chain (prior D’CENT waves used THORChain, unionchain.ai, NEAR Intents, Binance tags, etc.). I did not share my seed phrase with anyone. I am posting the explorer links so the movement can be verified independently. Warning to anyone reading this Do not DM me offering “recovery,” “whitelist,” or “private investigator” services. Those are scams that target people who just posted a loss. I will only work through official channels or well-known on-chain analysts. If you have been hit in the same D’CENT App Wallet wave, document your tx hashes the same way and report to D’CENT + local law enforcement. Generate a brand new recovery phrase on a device that never touched the old App Wallet before moving anything remaining. Thank you to anyone who can help trace this. @allthemoney
24
12
49
34,361
@trmlabs @chainalysis please help if you can... @allthemoney sent you ❤️
6
1
8
626
MELI NEED YOUR HELP! My ledger was hacked and drained for over $100k of XRP and XLM somehow... I need your help spreading the word so I might get it back... Please help me if you can... I have contacted Ledger and are waiting to hear back... Thanks for all you do for the community! @xrpqfs
42
7
52
2,395
@Ledger @XRPLF Please help!
12
5
22
738