Signal Snapshot
- Token Metrics flags Ripple’s 1 billion XRP escrow release in about 4 days as the key near-term supply signal to track alongside hack flows.
- A thief moved about $83 million in stolen XRP. No one can freeze the thief wallets.
- The funds were split across five accounts.
- About $75 million still sits in those first accounts. The XRP Ledger rules do not allow a freeze there.
- XRP traded around $1.55 on Saturday. It was down about 2% on the day.
Key Takeaways
- Token Metrics view frames the hack flow against scheduled supply, with Ripple set to release 1 billion XRP from escrow in about 4 days. About $83 million has moved so far, with about $75 million still unmoved.
- Ripple cannot freeze the thief wallets. Exchanges can only block funds if they land on their platforms.
- The real read is about speed and control. Stolen coins can move fast when freezes are not possible.
What Happened
Bitget lost about $388 million. The XRP part is now moving fast.
The breach hit on Thursday. The coins were split across five accounts.
By Saturday, the picture had changed.
The stolen XRP movement shows more than half has moved. About $83 million has left the first wallets. About $75 million still sits across the five first accounts.
Those first accounts cannot be frozen. The XRP Ledger does not give Ripple a button to stop them. Exchanges can act later. They can restrict accounts that get the stolen coins.
Circle and Tether also acted. They froze about $320,000 in related stablecoins. That is a small slice of the total breach.
XRP is the coin built into the XRP Ledger. It moves fast and settles in seconds. That speed helps normal users. It also helps a thief.
Here’s the deal. A hack this size usually ends with frozen funds. This time the freeze tool does not exist. So the funds keep moving.
Why It Matters
This matters because control is split. Ripple built the network. But Ripple does not control the wallets. That split shapes what happens next.
For investors, the risk is selling pressure. A thief does not hold for the long term. A thief looks for a way out. That can mean quick sales through any open door.
For exchanges, the job gets harder. They must watch deposits in real time. They must flag coins tied to the hack. They must act before the coins move again.
For regular holders, the lesson is simple. Price can shake on fear alone. Headlines about a thief can spook buyers. Sellers can step in first and ask later.
This also tests trust in custody. Exchanges hold large sums for users. Users trust that those sums are safe. A $388 million loss breaks that trust.
But it does not fix the core issue. The coins are still out there.
The stablecoin freeze shows the contrast. Circle and Tether can freeze their coins. They froze about $320,000 here. Ripple cannot do the same with XRP in thief wallets.
That difference matters for builders too. Some networks give issuers more control. The XRP Ledger does not give that control over XRP itself. That is by design. It also has costs in a hack.
If you own XRP, watch liquidity. Thin books can move fast on large sales. If you trade, watch spreads. Fear can widen them. If you just hold, watch facts. Noise moves faster than proof.
Token Metrics View
Token Metrics tags this as one of its main items. That means it stood out in Daily Pulse coverage. It is not background noise.
The most useful near term signal is supply. Token Metrics flags one near term catalyst. Ripple is set to release 1 billion XRP from escrow in about 4 days. That is the clearest scheduled event for the coin.
Why does that matter now. A hack adds surprise selling risk. An escrow release adds scheduled supply. The two can stack in the same week. That does not mean selling will happen. It means traders will watch supply more closely.
Polymarket consensus sees little chance of a pop this month. Bets on XRP hitting $1.80 by Sept end sit near 15%. That market ends on Oct 1. It is priced for a miss.
Bets on higher targets look even weaker. Bets on XRP hitting $3 sit under 1%. Bets on XRP hitting $2.80 also sit under 1%. The crowd does not expect a sharp rally into month end.
Bets on XRP hitting $1.80 are the closest watch. A move in that price would shift views fast. For now the read is cautious.
Spot action fits that mood. XRP traded around $1.55 on Saturday. It was down about 2% on the day. That is not a crash. It is soft price action during bad news.
Put it together. News risk is high. Supply news is near. Market hopes for a rally are low. That mix favors patience over bold bets.
Market Context
This is a security event with a market structure twist. Funds were stolen. But the market must now absorb the flow.
Exchange hacks are not new. What is different here is the freeze issue. Many hacks end with some funds frozen. Here the main XRP wallets cannot be frozen. That leaves fewer tools to slow the thief.
The case also shows how rails differ. Stablecoins run on issuer rails. The issuer can freeze. XRP runs on a neutral ledger. No single firm can block a wallet. That design choice has trade offs.
For market structure, the key is where coins cash out. Thieves need off ramps. Those are often exchanges or swap services. If those doors stay shut, the thief must wait. If one door opens, funds can move fast.
For sentiment, hacks hurt trust. Users ask if funds are safe. They ask if withdrawals will work.
For liquidity, the worry is thin weekends. Weekends can have fewer buyers. Large moves can have more impact. Saturday trade was soft but not panicked. That is worth noting without over reading it.
This story is also about custody. Custody means who holds the keys and how. Good custody uses cold storage. It uses limits. It uses checks. A breach of this size raises hard questions about those steps.
Risks to Watch
The top risk is more movement. About $75 million has not moved yet. If it moves, headlines will follow. Price could wobble on fear.
A second risk is a slip at an exchange. If stolen coins land and get sold, buyers could pull back. Spreads could widen. Short term swings could grow.
A third risk is copycat fear. Other users could pull funds just in case. That would not mean Bitget is unsafe now. It would mean trust needs time to heal.
What would make this matter less. A long pause in wallet moves would help. Proof that off ramps are blocked would help.
What would change the read. A freeze of more stablecoins would show tighter control. A public trail to an exchange deposit would show a choke point. A clear police action would shift the story.
What to Watch Next
- Watch the five first wallets for new outflows. No moves means less near term pressure.
- Watch exchange alerts for frozen deposits. Blocks at off ramps slow a cash out.
- Watch the escrow release in about 4 days. Fresh supply plus hack news is the combo to track.
- Watch XRP near $1.55 into the new week. Holding firm would show buyers are not scared.
- This is context, not advice. Do your own homework and keep risk small.
Sources / Data Used
- detailed review of the XRP transfers
- Token Metrics data used: upcoming escrow catalyst and Daily Pulse main items tag for XRP. Polymarket consensus on September price targets also informed the view.
