Hardware wallet users beware: a counterfeit Ledger Live app infiltrated Apple's App Store, siphoning $9.5 million from more than 50 victims in just one week. On-chain sleuth ZachXBT issued a community alert on April 14, detailing the scale of the heist.
Three biggest victims lost over $1 million each
According to ZachXBT's on-chain data, the thefts occurred between April 7 and 13, 2026. The fake app tricked users into revealing seed phrases or signing malicious transactions, draining assets across Bitcoin, EVM-compatible chains, Tron, Solana, and Ripple. The top three victims each lost seven figures: a victim on April 9 lost 3.23 million USDT (~$3.23 million); another on April 11 lost 2.079 million USDC (~$2.08 million); and a third on April 8 lost 20.64 BTC, 211 stETH, and 70 ETH (~$1.95 million).
Funds laundered via KuCoin and mixing service
After the theft, the attacker laundered funds through over 150 KuCoin deposit addresses, all linked to a centralized mixing service called “AudiA6,” known for charging high fees to clean illicit funds. ZachXBT highlighted KuCoin's troubled compliance history: in January 2025, KuCoin paid over $300 million to settle U.S. money-laundering charges; in February 2026, Austrian regulators banned it from onboarding new EU users despite its recent MiCA license.
Apple removes app, ZachXBT suggests class action
Apple pulled the fake app on April 13, but the damage was done. ZachXBT wrote: “I wonder if this could be grounds for a class-action lawsuit against Apple?” This is not the first fake crypto wallet app found on the App Store. As losses mount, the tech giant's scrutiny over crypto fraud faces growing legal pressure. Users are advised to download hardware wallet apps only from official websites, not by searching app stores.