Bridges & vaults — XRPL Fraud Tracking

Fraud Tracking — XRP Ledger

Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds

Work in progress. Everything here is a suspicion score worked out automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation. Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains need one more point for each step). Wash trading is different: its score is the share of the token's trading that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.

Period 1 hour 1 day 1 week 1 month Ledgers analysed from 2026-10-13 18:05:12 AEST to 2026-11-14 18:15:10 AEST · scores updated 2026-11-14 18:15:12 AEST

Bridge, vault and custody accounts (found by their public names, plus ones we add) watched for draining: a large share of the balance leaving, far more outflow than the account's own normal, money going to brand-new accounts without a tag, or keys changing. XRP locked into or released from escrow is shown separately and does not count as leaving. Every watched account is listed, quiet or not.

Suspicion	Account	Balance now	Sent	Received	Into / out of escrow	Why	Largest outflows
50.0%	rfmS3zq…z2YhwAxelar Bridge found by its public name	1,616,454 XRP	634,319 XRP 78 payments	631,639 XRP	—	sent 318x its normal outflow (normally about 1,995 XRP in a period this long) (+2.5) 99% of the outflow went to brand-new accounts (+1.5) 37 large payment(s) to new accounts without a tag (+1) = 5 points → 50%	59,892 XRP → rPPq4nR…YYqdj new 50,003 XRP → rBeTpRc…YmAhQ new 50,000 XRP → rBeTpRc…YmAhQ new	Follow →
11.9%	rKoePMg…doTArXPR Bridge found by its public name	230,703 XRP	365,218 XRP 224 payments	164,303 XRP	—	net outflow of 34% of its balance (+2) 4 large payment(s) to new accounts without a tag (+1) = 3 points → 11.9%	99,000 XRP → rPtsmPY…Me8NJ new 11,199 XRP → rLhbrze…wtBkL 10,999 XRP → rLhbrze…wtBkL	Follow →
1.8%	rw9isBi…9VY35Cobo Custody found by its public name	419,997 XRP	2,082,172 XRP 1009 payments	2,129,453 XRP	—	23 large payment(s) to new accounts without a tag (+1) = 1 points → 1.8%	312,202 XRP → rBg1pv9…4d3bKCobo Custody 310,000 XRP → rwziy2p…yZYam 192,091 XRP → rBg1pv9…4d3bKCobo Custody	Follow →
0.0%	rBg1pv9…4d3bKCobo Custody found by its public name	5,411,107 XRP	511,134 XRP 2 payments	504,292 XRP	—	normal activity: no unusual outflow → 0%	327,132 XRP → rw9isBi…9VY35Cobo Custody 184,002 XRP → rw9isBi…9VY35Cobo Custody	Follow →
0.0%	rfkXSaC…dtVXjFlare Core Vault found by its public name	3,666,893 XRP	1,379,690 XRP 15 payments	1,981,576 XRP	2,800 drops locked	normal activity: no unusual outflow → 0%	196,440 XRP → rU3KcE1…F31Wr 194,800 XRP → rEUvL6u…T1aR7 148,530 XRP → rEUvL6u…T1aR7	Follow →
0.0%	rxXXXeM…UswM1XRPL / TX bridge added by us	763.54 XRP	0 XRP	0 XRP	—	no XRP moved in this period		Follow →
0.0%	rBWpYJh…3rgeDCobo Custody found by its public name	1.00 XRP	1,618,319 XRP 2132 payments	1,617,351 XRP	—	normal activity: no unusual outflow → 0%	200,002 XRP → rw9isBi…9VY35Cobo Custody 56,572 XRP → rw9isBi…9VY35Cobo Custody 50,000 XRP → rw9isBi…9VY35Cobo Custody	Follow →