The XRP community is on alert over a new wave of unidentified projects requesting users’ private keys to connect to decentralized applications.
The warning comes amid the rise of so-called “vibe-coded” projects, where applications can be created and deployed quickly by developers whose identities or security practices may be difficult for users to verify.
Along these lines, Robert Kiuru, COO at XRPL Labs and Xaman, shared a strong warning to the XRP community, urging them never to share their private keys under any circumstances. “Your keys are the keys to your kingdom. Keep them private, secure and never enter them anywhere,” Kiuru wrote.
An X user, Jenna, pointed out that some vibe-coded XRPL projects with unknown developers are asking users to enter their private keys for Xaman Wallet as a way to connect to their site/app, urging them never to enter their private keys in a random app, with Kiuru engaging with this post.
You Might Also Like
This warning, however, extends beyond a single application or project. As development across the XRPL ecosystem accelerates, users may encounter an increasing number of new decentralized applications, making basic wallet security practices increasingly important.
XRP Ledger eyes major developments
The warning remains significant as XRP Ledger eyes key developments in the days ahead.
You Might Also Like
At the recently concluded XRP Seoul 2026 event, builders shared how they are creating real-world utility on the XRPL, from risk management and RWA to onchain finance.
Through the “Permission Delegation” feature, DeFi activity will run directly on XRPL. Users can borrow XRP from Ethereum liquidity pools, receive RLUSD, and bridge it back to XRPL. The vaults are expected to grow across the ledger.
The native compliance and low settlement costs of the XRPL are making it the choice of institutional builders over general-purpose chains.
Complete on-chain transparency has, however, been a barrier for traditional finance, and to solve this, the XRP Ledger is introducing “confidential transfers” powered by Zero-Knowledge Proofs (ZKPs).
Be the first to comment