Chris Larsen
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·36Ty4r…nzjtSummary
Chris Larsen is the co-founder and Executive Chairman of Ripple, one of the most prominent figures in the XRP ecosystem. On January 30, 2024, attackers drained an estimated 213–283 million XRP (valued at $112.5–$150 million) from his personal cryptocurrency accounts — not Ripple corporate wallets — in what became the largest individual crypto theft of 2024. A U.S. government forfeiture complaint filed in March 2025 linked the breach to the 2022 LastPass password manager hack, alleging that private keys had been stored in an online vault subsequently compromised by attackers.
Connected Entities
8 entities · 60 linked investigations- rJNLz3…Qojm→mentioned with→Chris Larsen(50%)
- ZachXBT→mentioned with→Kraken(60%)
- ZachXBT→mentioned with→Binance(60%)
- LastPass→mentioned with→FixedFloat(65%)
- LastPass→mentioned with→Kraken(65%)
- LastPass→mentioned with→ZachXBT(70%)
- Chris Larsen→mentioned with→Ripple Labs(90%)
- Chris Larsen→mentioned with→ZachXBT(70%)
- Chris Larsen→mentioned with→FixedFloat(70%)
- Chris Larsen→mentioned with→Binance(70%)
- + 5 more
Timeline(26 events)
September 2012
Chris Larsen co-founds OpenCoin (later renamed Ripple Labs), beginning development of the Ripple payment protocol and XRP ledger.
Wikipedia / CoinPaperJanuary 2013
Ripple begins selling XRP to institutional investors; the SEC would later allege this constituted an unregistered securities offering.
SEC Press Release 2020-338December 2020
SEC files complaint against Ripple Labs, Brad Garlinghouse, and Christian A. Larsen, alleging $1.3 billion in unregistered XRP securities offerings. Larsen personally alleged to have sold approximately $600 million in unregistered XRP.
SEC.gov22 December 2020
SEC files enforcement action against Ripple Labs, CEO Brad Garlinghouse, and co-founder Chris Larsen, alleging unregistered securities sales of XRP totaling approximately $1.3 billion.
SEC.govAugust 2022
LastPass suffers first major security breach; source code and technical information exfiltrated.
Krebs on SecurityAugust 2022
LastPass suffers its first major security breach. A second breach follows in November 2022. Attackers steal encrypted customer password vaults from the platform.
Krebs on SecurityNovember 2022
LastPass suffers second breach; encrypted customer password vaults stolen. Larsen's vault — allegedly containing XRP private keys in Secure Notes — is among those compromised.
Krebs on SecurityNovember 2022
Second LastPass breach: attackers access cloud storage containing encrypted user vault backups using credentials stolen in the August 2022 incident.
BleepingComputerJuly 2023
U.S. District Judge Analisa Torres issues summary judgment in SEC v. Ripple: institutional XRP sales violated securities law; programmatic secondary-market sales did not.
CNBC13 July 2023
Judge Analisa Torres issues partial summary judgment in SEC v. Ripple, finding that programmatic XRP sales on exchanges were not securities transactions; certain institutional sales were. SEC drops individual charges against Larsen and Garlinghouse in October 2023.
DecryptOctober 2023
SEC drops all personal charges against Larsen and Garlinghouse; case against Ripple Labs continues.
BusinessWire / Paul Weiss30 January 2024
Larsen's personal XRP wallets hacked; approximately 213 million XRP ($112.5M) drained. ZachXBT detects and reports the unauthorized outflows in real time. Stolen funds routed through MEXC, Gate.io, Binance, Kraken, OKX, HTX, and HitBTC.
CoinDesk / TechCrunch30 January 2024
Approximately 213–237 million XRP is drained from Chris Larsen's personal wallets across 8 transactions spanning 11 hours. WhiteBIT is the first exchange to detect suspicious inflows and alert Larsen's team. The primary compromised address is rJNLz3A1qPKfWCtJLPhmMZAfBkutC2Qojm.
TheCryptoBasic / TechCrunch / ZachXBT31 January 2024
Larsen publicly confirms hack via X, states breach was limited to personal accounts, law enforcement notified, exchanges alerted to freeze affected addresses.
X (@chrislarsensf)31 January 2024
ZachXBT publicly identifies the breach in a Telegram post, flagging on-chain evidence of 213 million XRP ($112.5M) stolen from an address linked to Larsen. XRP price falls approximately 5% amid rumors of a Ripple network breach.
CoinDesk / The BlockFebruary 2024
Binance CEO Richard Teng announces Binance has frozen $4.2 million worth of stolen XRP deposits made by the attacker.
CoinDeskFebruary 2024
Hacken publishes on-chain forensic analysis identifying eight intermediate wallets used by the attacker, including addresses rGhR13XyM43WdDaSMznHd5rZ4cJatybvEg, rHQVKntyfkDCPhEBL2ctryuEAkDZgckmmV, rLsUemhuBZtF44rqqzneb2F9JgyrRYYd4t, rKPERax7t9iFvT3RHXn5nifyNpzp9a4hBa, and rpjs4HLX1gJoEenH69PsQmXaXY22QhCYAT. Hacken flags a possible link to an XRP-authorized wallet (rU1bPM4) and raises the possibility of insider involvement.
Hacken / CoinTelegraph2 February 2024
Binance announces it has frozen $4.2 million in XRP tokens linked to the theft. Binance CEO Richard Teng states the exchange will continue to monitor the exploiter's remaining external wallet holdings.
CoinDeskJune 2024
U.S. law enforcement begins tracing and seizing stolen cryptocurrency from exchanges. Between June 2024 and February 2025, approximately $23.6 million is recovered from OKX, Kraken, WhiteBIT, AscendEX, FixedFloat, SwapSpace, and CoinRabbit.
BleepingComputerMarch 2025
ZachXBT and Krebs on Security report the forfeiture complaint's findings; forfeiture document identifies Larsen as Victim-1 and confirms the LastPass breach as the attack vector. Total stolen revised upward to $150M (283M XRP at updated valuations).
Krebs on SecurityMarch 2025
SEC and Ripple reach final settlement. Ripple pays $125 million civil penalty. All appeals dropped. All charges against Larsen personally are fully resolved with no admission of wrongdoing.
CNBC / CoinDesk6 March 2025
Federal prosecutors in Northern District of California announce seizure of $23,604,815 in cryptocurrency traced to the January 2024 theft, from exchanges OKX, Kraken, WhiteBIT, AscendEX, FixedFloat, SwapSpace, and CoinRabbit. Forfeiture complaint formally links the theft to the 2022 LastPass breaches.
BleepingComputer7 March 2025
ZachXBT publicly discloses the contents of a U.S. civil forfeiture complaint (Northern District of California) formally linking Larsen's January 2024 theft to the 2022 LastPass password manager breaches. The complaint identifies Larsen as 'Victim-1' and notes private keys were stored in a compromised online password manager vault. The complaint also confirms $23,604,815.09 in seized assets.
Krebs on Security / CoinDesk7 August 2025
Ripple Labs and SEC file joint stipulation of dismissal, formally ending SEC v. Ripple after more than four and a half years. Ripple pays $50 million; $75 million in escrowed funds is returned.
Decrypt / SEC.govResearch Gaps
1 open · agent-resolvableHeuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.
- [med]unarchived sources
Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.
Decision Log
- hash: DubeCyX3Zy7qpkJYVUQaNAx1WQqAdAdQ6TEBkonjHwwD
This investigation is cryptographically anchored to the Solana blockchain (1 event). 21 of 22 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 4:05:05 PM
last updated: 8/29/2026, 1:35:51 AM
5 viewsavoid.net — verified advice for a post-truth world