Bridges & vaults — XRPL Fraud Tracking

Fraud Tracking — XRP Ledger

Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds

Work in progress. Everything here is a suspicion score worked out automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation. Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains need one more point for each step). Wash trading is different: its score is the share of the token's trading that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.

Period 1 hour 1 day 1 week 1 month Ledgers analysed from 2026-10-08 00:45:41 AEST to 2026-11-09 00:55:32 AEST · scores updated 2026-11-09 00:55:41 AEST

Bridge, vault and custody accounts (found by their public names, plus ones we add) watched for draining: a large share of the balance leaving, far more outflow than the account's own normal, money going to brand-new accounts without a tag, or keys changing. XRP locked into or released from escrow is shown separately and does not count as leaving. Every watched account is listed, quiet or not.

Suspicion	Account	Balance now	Sent	Received	Into / out of escrow	Why	Largest outflows
11.9%	rKoePMg…doTArXPR Bridge found by its public name	423,662 XRP	649,754 XRP 517 payments	281,106 XRP	—	net outflow of 34% of its balance (+2) 9 large payment(s) to new accounts without a tag (+1) = 3 points → 11.9%	145,000 XRP → r3KcuGV…B85y3 99,528 XRP → r3KcuGV…B85y3 31,000 XRP → rphQ4Ud…M3Rcy new	Follow →
7.6%	rfmS3zq…z2YhwAxelar Bridge found by its public name	1,618,885 XRP	377,458 XRP 119 payments	379,182 XRP	—	99% of the outflow went to brand-new accounts (+1.5) 20 large payment(s) to new accounts without a tag (+1) = 2.5 points → 7.6%	50,003 XRP → rBeTpRc…YmAhQ new 50,000 XRP → rBeTpRc…YmAhQ new 50,000 XRP → rD3BVcL…C5yBG new	Follow →
1.8%	rw9isBi…9VY35Cobo Custody found by its public name	283,060 XRP	6,186,586 XRP 2140 payments	6,148,163 XRP	—	15 large payment(s) to new accounts without a tag (+1) = 1 points → 1.8%	599,069 XRP → rBg1pv9…4d3bKCobo Custody 303,341 XRP → rBg1pv9…4d3bKCobo Custody 295,921 XRP → rBg1pv9…4d3bKCobo Custody	Follow →
0.0%	rBg1pv9…4d3bKCobo Custody found by its public name	5,417,949 XRP	2,952,223 XRP 12 payments	3,248,272 XRP	—	normal activity: no unusual outflow → 0%	295,000 XRP → rw9isBi…9VY35Cobo Custody 295,000 XRP → rw9isBi…9VY35Cobo Custody 295,000 XRP → rw9isBi…9VY35Cobo Custody	Follow →
0.0%	rfkXSaC…dtVXjFlare Core Vault found by its public name	3,057,275 XRP	4,409,830 XRP 73 payments	4,334,238 XRP	10,000,000 XRP locked	normal activity: no unusual outflow → 0%	181,020 XRP → rU3KcE1…F31Wr 180,540 XRP → rEUvL6u…T1aR7 170,140 XRP → rEUvL6u…T1aR7	Follow →
0.0%	rxXXXeM…UswM1XRPL / TX bridge added by us	763.54 XRP	0 XRP	0 XRP	—	no XRP moved in this period		Follow →
0.0%	rBWpYJh…3rgeDCobo Custody found by its public name	747.30 XRP	3,195,901 XRP 5644 payments	3,176,010 XRP	—	normal activity: no unusual outflow → 0%	200,000 XRP → rw9isBi…9VY35Cobo Custody 200,000 XRP → rw9isBi…9VY35Cobo Custody 52,107 XRP → rw9isBi…9VY35Cobo Custody	Follow →