Digital Asset Investor, a widely followed cryptocurrency commentator, has alerted members of the XRP community to an apparent phishing campaign aimed at stealing their digital assets.
XRP phishing scam targets users with fake Ripple announcement
In a recent YouTube video shared on social platform X, Digital Asset Investor pointed to what he described as a fraudulent Ripple announcement. The fake message falsely introduced a new system of XRP holder tiers, attempting to lure unsuspecting users into clicking a malicious link. The commentator emphasized that Ripple, the company overseeing the XRP Ledger and responsible for advancing cross-border payment solutions, had no involvement with the alleged offer.
He noted that the deceptive post appeared credible because it was carefully designed to look like an official communication from Ripple. However, he underscored that the message was entirely fabricated to compromise users’ wallets and credentials.
The commentator said the announcement was “all fake” and warned that anyone who interacts with the phishing link risks losing their XRP holdings.
He urged XRP holders to be highly cautious, encouraging them to verify announcements solely through Ripple’s official channels before clicking on links or connecting wallets to unfamiliar sites.
Broader warning over wallet security
The video also referenced a separate serious security breach involving hardware cryptocurrency wallets. Digital Asset Investor shared details of an alert in which 594 BTC, equivalent to approximately $38 million, were reportedly stolen from around 500 Coldcard hardware wallets in under half an hour.
According to the information detailed in the alert, the vulnerability was linked to Coldcard firmware version 4.0.0, released in March 2021. The flaw allegedly compromised the process of generating private keys, making it possible for attackers to access affected wallets.
Mini dictionary: Coldcard is a Bitcoin-only hardware wallet designed for secure offline storage and private key management. Hardware wallet firmware is the low-level software running on the device which, if compromised, can threaten the security of stored assets.
While discussing the case, Digital Asset Investor explained that reports of such incidents have led him to strengthen his security habits for storing cryptocurrency assets.
| Incident | Asset Type | Amount Lost | Wallets Involved | Timeframe | Alleged Cause |
|---|---|---|---|---|---|
| XRP Phishing Scam | XRP | Not specified | N/A | N/A | Fake Ripple announcement with phishing link |
| Coldcard Wallet Exploit | Bitcoin (BTC) | 594 BTC ($38 million) | ~500 | 25 minutes | Firmware vulnerability (v4.0.0) |
Personal security practices and recommendations
Digital Asset Investor disclosed that he avoids keeping hardware wallets at his residence. Instead, he has set up his storage process in a way that moving his cryptocurrency would take several hours or up to two or three days. He stated that this intentional delay is meant to prevent quick access to his funds in case of a physical or digital breach.
He emphasized that limiting immediate access to cryptocurrency holdings creates another layer of defense against theft.
Throughout his message, Digital Asset Investor consistently urged crypto enthusiasts to treat unexpected announcements skeptically, refrain from clicking on unverified links, and adopt robust security strategies to safeguard their assets from phishing attacks and other threats.
