XRP holders are facing another security warning after Ripple CTO Emeritus David Schwartz flagged the Xaman Foundation’s account on X as potentially compromised or fraudulent. His alert prompted fresh concerns within the XRP Ledger community, particularly after the account promoted an alleged XAMAN airdrop that encouraged users to check their eligibility and claim tokens on-chain.
Schwartz did not publicly explain what led him to question the account’s authenticity. However, his warning came only hours after the account, identified as Xaman_FDNT, announced that the XAMAN airdrop was live on the XRP Ledger. The post called on XRP holders, XRPL users, and people associated with the Xaman Wallet to verify their eligibility and claim their allocations.
The announcement quickly drew criticism from community members. According to the supplied report, users complained about spam and repeated tags connected to the supposed airdrop, raising further concerns about the account’s activity. Such promotions can create security risks for crypto users, especially when they are directed toward connecting wallets or interacting with unfamiliar claim pages. The report, however, does not establish that the advertised airdrop was fraudulent or confirm that any wallets were compromised.
Following Schwartz’s warning, members of the XRP community also voiced concerns about the account’s activity. The account was subsequently suspended on X, apparently after users reported it, although the precise reason for the suspension was not confirmed in the supplied information.
The episode highlights the importance of verifying crypto announcements before acting on them. A post that uses a familiar project name or targets an established wallet community should not automatically be treated as authentic. Users should independently confirm announcements through verified official channels and avoid connecting wallets, signing transactions, or sharing sensitive information in response to unexpected airdrop messages.
For XRP holders, the key issue is whether the flagged account was genuinely compromised, impersonating the foundation, or involved in another form of suspicious activity. Schwartz’s warning and the reported suspension have intensified the questions surrounding the account, but neither detail alone establishes exactly what happened. Until further confirmation becomes available, users should treat the disputed airdrop announcement cautiously and rely on independently verified information.
