A 150 million dollar theft that targets Ripple co-founder Chris Larsen has been traced back to a security course involving the password administrator Lastpass, according to a forfeit complainant filed by US law enforcement on March 6, marked by Blockchain Sleuth Zachxbt.

Zachxbt shared that the complaint detailed how Larsen’s private keys – or code to access one’s token holdings – was stored in Lastpass, the widely used password administrator, which suffered a large break in 2022.

At that time, hackers stole source code and technical data by compromising a developer’s account. In November of that year, they used this access to infiltrate a cloud storage system that stole encrypted customer code and non -encrypted metadata to estimated 25 million users.

Although ‘vaults’ were encrypted, weak or recycled master passwords could be brute-twists, which revealed stored data.

Hackers took advantage of this vulnerability, access to Larsen’s keys, and siphoned XRP worth $ 150 million at the time of the theft and over $ 600 million from Saturday’s awards.

“A forfeiture of complaint that was filed yesterday of US law enforcement revealed the cause of ~ $ 150 million

“Up to this point, Chris Larsen had not published the cause of the theft,” he added.

Larsen confirmed the incident in January, where he clarified that hacked only affected his personal accounts, not Ripple’s company’s wallets. He does not yet publicly comment on the loss of the forfeiture.

The fall from 2022 Lastpass hack has been extensive and remains continuous. In December, the Security Alliance (SEAL), a team of cybersecurity experts, who focused on the crypto market, estimated that cryptotab associated with the violation stirred at least $ 250 million from May 2024.