11 2
$150 Million XRP Theft Linked to LastPass Security Breach
A theft of $150 million targeting Ripple co-founder Chris Larsen has been linked to security issues with LastPass, according to a forfeiture complaint by U.S. law enforcement.
- Larsen's private keys were stored in LastPass, which experienced a major breach in 2022.
- Hackers compromised a developer account, accessing source code and customer password vaults for approximately 25 million users.
- Weak master passwords allowed hackers to brute-force access to encrypted vaults.
- The vulnerability led to the theft of XRP valued at $150 million at the time, now worth over $600 million.
- Larsen confirmed the hack affected only personal accounts, not Ripple’s corporate wallets.
- The Security Alliance estimated crypto losses from the LastPass breach reached at least $250 million by May 2024.