Bridges & vaults — XRPL Fraud Tracking

Fraud Tracking — XRP Ledger

Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds

Work in progress. Everything here is a suspicion score worked out automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation. Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains need one more point for each step). Wash trading is different: its score is the share of the token's trading that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.

Period 1 hour 1 day 1 week 1 month Ledgers analysed from 2026-10-13 15:17:16 AEST to 2026-11-14 15:27:11 AEST · scores updated 2026-11-14 15:27:16 AEST

Bridge, vault and custody accounts (found by their public names, plus ones we add) watched for draining: a large share of the balance leaving, far more outflow than the account's own normal, money going to brand-new accounts without a tag, or keys changing. XRP locked into or released from escrow is shown separately and does not count as leaving. Every watched account is listed, quiet or not.

Suspicion	Account	Balance now	Sent	Received	Into / out of escrow	Why	Largest outflows
37.8%	rKoePMg…doTArXPR Bridge found by its public name	230,493 XRP	980,140 XRP 632 payments	363,879 XRP	—	net outflow of 51% of its balance (+3.5) 10 large payment(s) to new accounts without a tag (+1) = 4.5 points → 37.8%	145,000 XRP → r3KcuGV…B85y3 99,528 XRP → r3KcuGV…B85y3 99,000 XRP → rPtsmPY…Me8NJ new	Follow →
7.6%	rfmS3zq…z2YhwAxelar Bridge found by its public name	1,616,454 XRP	636,611 XRP 168 payments	635,903 XRP	—	98% of the outflow went to brand-new accounts (+1.5) 37 large payment(s) to new accounts without a tag (+1) = 2.5 points → 7.6%	59,892 XRP → rPPq4nR…YYqdj new 50,003 XRP → rBeTpRc…YmAhQ new 50,000 XRP → rBeTpRc…YmAhQ new	Follow →
1.8%	rw9isBi…9VY35Cobo Custody found by its public name	371,486 XRP	5,577,241 XRP 2661 payments	5,667,538 XRP	—	27 large payment(s) to new accounts without a tag (+1) = 1 points → 1.8%	312,202 XRP → rBg1pv9…4d3bKCobo Custody 310,000 XRP → rwziy2p…yZYam 284,167 XRP → rBg1pv9…4d3bKCobo Custody	Follow →
0.0%	rBg1pv9…4d3bKCobo Custody found by its public name	5,411,107 XRP	1,398,357 XRP 7 payments	1,570,731 XRP	—	normal activity: no unusual outflow → 0%	327,132 XRP → rw9isBi…9VY35Cobo Custody 225,768 XRP → rw9isBi…9VY35Cobo Custody 184,002 XRP → rw9isBi…9VY35Cobo Custody	Follow →
0.0%	rfkXSaC…dtVXjFlare Core Vault found by its public name	3,946,622 XRP	4,428,310 XRP 63 payments	5,590,692 XRP	10,000,000 XRP locked	normal activity: no unusual outflow → 0%	196,440 XRP → rU3KcE1…F31Wr 194,800 XRP → rEUvL6u…T1aR7 181,020 XRP → rU3KcE1…F31Wr	Follow →
0.0%	rxXXXeM…UswM1XRPL / TX bridge added by us	763.54 XRP	0 XRP	0 XRP	—	no XRP moved in this period		Follow →
0.0%	rBWpYJh…3rgeDCobo Custody found by its public name	1.00 XRP	4,269,142 XRP 6565 payments	4,247,360 XRP	—	normal activity: no unusual outflow → 0%	200,002 XRP → rw9isBi…9VY35Cobo Custody 200,000 XRP → rw9isBi…9VY35Cobo Custody 200,000 XRP → rw9isBi…9VY35Cobo Custody	Follow →