A $150 million heist from Ripple co-founder Chris Larsen’s digital wallet has been traced back to a security lapse at LastPass, as detailed in a forfeiture complaint submitted by U.S. authorities on March 6th.
The complaint, brought to light by blockchain analyst ZachXBT, outlines how cybercriminals gained access to Larsen’s private keys stored in LastPass, a password management tool that suffered a substantial breach in 2022.
During the LastPass breach, cyber attackers infiltrated a developer’s account, facilitating the theft of source code and technical information. By November of that year, they had breached a cloud storage system, acquiring encrypted customer password vaults and unencrypted metadata impacting roughly 25 million users. While the vaults were secured with encryption, weak or reused master passwords could be manipulated, granting unauthorized access to confidential information.
- Happy New Month, Welcome To August
Happy New Month and Welcome to the month of August. Gratitude isn’t about pretending life is perfect. It’s about recognizing the good that already exists, even while you’re working toward something better. - Global Economy Shows Mixed Signals: Slowing Growth, Inflation, and Trade Uncertainty Shape the Outlook
The global economy is sending mixed signals as slowing growth, persistent inflation, and trade uncertainties continue to challenge policymakers. Explore the latest economic trends and what they mean for businesses and consumers. - Sudanese Refugees Face Severe Water Crisis in Chad | Humanitarian Update
Thousands of Sudanese refugees in Chad are struggling with critical water shortages as humanitarian organizations warn of worsening living conditions. Learn about the crisis, its causes, and ongoing relief efforts. - Instagram Expands Privacy Protections: What the New Safety Measures Mean for Users
Instagram has introduced stronger privacy protections to combat unauthorized recordings and privacy violations. Discover what’s changing, why it matters, and how the updates affect users. Instagram Expands Privacy Protections: A New Era for User Safety Privacy has become one of the biggest concerns for social media users worldwide. As more people share personal moments online,… Read more: Instagram Expands Privacy Protections: What the New Safety Measures Mean for Users - Uganda Launches Fresh Licensing Exercise for Labour Export Agencies: What Workers Need to Know
Uganda has announced a mandatory re-licensing process for all labour export agencies as part of reforms aimed at improving transparency, protecting migrant workers, and strengthening industry oversight.
These vulnerabilities were exploited, resulting in the theft of Larsen’s private keys and the subsequent theft of XRP worth $150 million at the time of the event, which has since soared past $600 million at current market values. ZachXBT pointed out that prior to this complaint, Larsen had not publicly revealed the details of the theft.
In January, Larsen acknowledged the incident, clarifying that the hack was confined to his personal accounts and did not affect Ripple’s corporate wallets. He has yet to provide any comments regarding the forfeiture notice.