XRP Healthcare took the XRPH Wallet app offline after a security incident involving approximately 4,011 wallets and roughly $452,000 in digital assets. The company said its team, rather than the attacker, removed the apps as a precaution and disabled in-app access while investigating the compromise. The underlying XRP Ledger accounts remain active, allowing users who know their XRPL addresses to check balances and transaction histories independently. XRP Healthcare said about 445,000 DAI was traced to a single Ethereum wallet and had not moved, while its preliminary investigation found no evidence of a fault in the XRP Ledger itself. An xrpl.to analysis said the incident transferred 267,664 XRP, 23.2 million XRPH and 2.43 million XRPHAI from 4,011 wallets, with 311,613 XRP routed through NEAR Intents and converted into 445,198 DAI. The analysis reported that wallet seeds were stored unencrypted on users' phones and sent to XRP Healthcare's server through the staking feature. It found that 1,198 of 1,225 staked wallets were drained, but said the exposure appeared broader because seven in 10 victims had not staked.