Ripple CTO Emeritus David Schwartz has issued a scam warning to the XRP community after the official X account of a major XRP-focused self-custody wallet was compromised. The breach, confirmed by Schwartz, puts users at risk of fraudulent posts from a trusted source within the ecosystem.
The compromised account
The wallet provider, which has not been named in public statements, is a well-known name among XRP holders who prefer to hold their own keys. Its X account is the latest in a string of social media takeovers targeting crypto projects, though Schwartz’s warning suggests the incident is being treated as active and urgent.
Details about how the account was compromised remain scarce. What’s clear is that Schwartz, who spent years as Ripple’s chief technology officer before stepping into an emeritus role, is using his platform to get ahead of any malicious posts that might appear from the wallet’s handle.
Why Schwartz is involved
Schwartz is one of the most recognizable technical voices in the XRP ecosystem. His warning carries weight because he doesn’t routinely comment on security incidents involving third-party wallets. When he does, the community tends to listen.
The alert comes at a time when self-custody wallets are under growing scrutiny. As more users move assets off exchanges, the wallets that hold those keys become high-value targets for attackers. A compromised social account is often the first step in a phishing campaign — scammers use the trusted handle to post fake support links or urgent “security updates” designed to harvest seed phrases.
What users should watch for
Schwartz’s warning didn’t include specific instructions, but the pattern is familiar. Compromised crypto accounts typically push followers toward malicious links, fake airdrops, or bogus wallet migration tools. Any post from the affected account asking for seed phrases, private keys, or urgent action should be treated as hostile until the wallet provider regains control.
The wallet’s users are being asked to stay alert. There’s no indication yet of how many people may have been exposed or whether any funds have been lost. The compromised account itself is the immediate concern.
This isn’t the first time a crypto project’s social account has been hijacked, and it won’t be the last. The XRP community has dealt with phishing attempts and impersonation scams before, often amplified by the token’s large and active retail base. Schwartz’s decision to speak publicly suggests the threat is considered serious enough to warrant a community-wide heads-up rather than a quiet fix.
For now, the wallet provider has not issued a detailed statement about the breach. Users are left to rely on Schwartz’s warning and their own caution. The account remains compromised, and the risk of a fraudulent post appearing in followers’ timelines hasn’t passed.
The next concrete step will be the wallet provider’s recovery of its account and any official guidance it issues. Until then, XRP holders are being told, in effect, to trust nothing from that handle — including anything that looks like a routine update.
