GateHub wallets were compromised via API tokens authorized with valid credentials, allowing attackers to steal 23.2M XRP from approximately 100 user accounts. Of this, 13.1M XRP was laundered through exchanges before recovery efforts.