Xaman, the wallet formerly known as Xumm and one of the XRP Ledger's most recognized entry points, has quietly rolled out a yield-earning vault for XRP holders. The pitch is simple: deposit XRP, earn yield. But a closer read of the product's own disclosure reveals something uncomfortable. The example used to market the vault is hypothetical, and the actual terms differ from that example. According to the reported figures, a 100 XRP deposit requires roughly 15 months just to recoup the fees. That is not a yield product. That is a lock-up dressed in APR clothing.
I have spent the last seven years auditing exactly this kind of structure. In 2017, my final-year thesis cross-referenced 15 ICO tokenomics models against actual Ethereum mainnet gas costs. Forty percent of the projected supply rates were mathematically impossible. The lesson from that exercise was not that projects lie. It was that projects present best-case hypotheticals as baseline expectations, and retail users read them as promises. Xaman's vault follows the same playbook, just with a wallet interface instead of a whitepaper.

Here is what we actually know. Xaman offers a yield feature for XRP. The marketing example is explicitly labeled hypothetical. The real vault terms are different from that example. And a 100 XRP deposit takes about 15 months to break even on fees. Everything else, including the source of the yield, the underlying protocol, the fee structure beyond the payback estimate, and the custody model, is undisclosed. That is not a minor gap. For a yield product, the source of yield is the entire ballgame.

XRP has no native staking yield. The XRP Ledger uses a unique consensus mechanism that does not pay validators or holders for securing the network. This is a structural fact, not an opinion. Therefore, any XRP yield must come from one of four places: lending interest, where a borrower pays to use your XRP and you take counterparty risk; automated market maker fees, where you provide liquidity and absorb impermanent loss; third-party protocol subsidies, where a DeFi protocol pays you in its own token to bootstrap liquidity and the subsidy ends when the token does; or the platform's own marketing budget, where Xaman pays you to acquire your deposit and stops when the acquisition campaign ends. Each of these has a different risk profile. None of them are disclosed. When the yield source is hidden, the user cannot distinguish between a conservative lending pool and a token-subsidy farm that will collapse the moment incentives dry up. This is the core failure. It is not a technical bug. It is an information asymmetry so wide that the user is effectively blind.
The 15-month payback period is the tell. In a genuine yield product with a transparent, sustainable source, fees are typically amortized over weeks, not quarters. A 15-month breakeven means the user is paying a substantial upfront cost, likely a combination of deposit fees, performance fees, and perhaps a spread on the underlying strategy. For that cost to make sense, the yield must persist for well over a year. But the yield source is undisclosed, the underlying protocol is unnamed, and the terms can apparently change. The user is being asked to underwrite a multi-quarter exposure to an unknown counterparty based on a hypothetical example that the provider itself admits is not the actual deal.
Follow the gas, not the hype. In this case, the gas is the fee structure, and it is pointing in one direction: the house collects upfront, and the user carries the tail risk. Whales move in silence. Listen closely. The silence here is the absence of any disclosure about where the yield originates. When a product cannot or will not name its yield source, the rational assumption is that the source is either fragile, subsidized, or both.
The contrarian angle is that this might not be a scam. It might be something more mundane and more common: a wallet team under monetization pressure that shipped a yield wrapper around an existing XRPL DeFi protocol without fully thinking through the disclosure layer. Xaman is an entry point, not a hedge fund. Its core business is user acquisition and retention. Yield features are a retention tactic. The team may have assumed that users would not read the fine print, and to be fair, most will not. The hypothetical example does the marketing work. The actual terms do the legal work. This is not unique to Xaman. It is the standard playbook for wallet-embedded yield across the industry. But standard does not mean safe. And in a bear market, the difference between a sustainable yield source and a subsidized one becomes visible quickly. Liquidity leaves first. Panic follows. If the underlying yield is subsidy-driven, the exit will be sudden, and the wallet will be the last to know.
Check the supply. Trust the chain. XRP's supply is fixed and its ledger is transparent. Every XRP that moves into a vault is visible on-chain. What is not visible is the contractual layer that governs what happens to that XRP once it is inside. The chain can tell you that funds moved. It cannot tell you whether the yield is real. That requires disclosure, and disclosure is exactly what is missing.
My audit experience taught me one rule that has never failed: if a yield product cannot answer the question 'where does the money come from' in one sentence, the correct response is to walk away. Not because the product is necessarily fraudulent, but because the user cannot price the risk. And in a bear market, unpriced risk is the only risk that matters.

What I am watching next week is whether Xaman publishes the actual vault terms in a readable, stable format, and whether it names the underlying protocol. If it does, the product can be evaluated on its merits. If it does not, the silence is the signal. The wallet has a user base that trusts it. That trust is the asset. The yield vault is a test of whether the team understands that trust is harder to rebuild than a fee schedule is to change.