Musician Loses $420K in Bitcoin to Fake Ledger App on Apple App Store

American musician Garrett Dutton, known as G. Love, lost 5.9 Bitcoin valued at $420,000 after entering his seed phrase into a fraudulent Ledger app downloaded from Apple's App Store. The fake application, which impersonated the legitimate hardware wallet company Ledger, bypassed Apple's app review process and appeared on the official store. Blockchain investigator ZachXBT tracked the stolen funds to deposit addresses associated with the cryptocurrency exchange KuCoin. The incident highlights security vulnerabilities in app store vetting processes and the risks of phishing attacks targeting cryptocurrency holders.

Cryptocurrency theft via fraudulent mobile application

• ▪Garrett Dutton lost Bitcoin through a fake Ledger app on the Apple App Store.

Financial impact and victim details

• ▪Garrett Dutton lost 5.9 Bitcoin in the fraudulent app incident.
• ▪Garrett Dutton lost $420,000 worth of Bitcoin.

Tracking and movement of stolen Bitcoin

• ▪Garrett Dutton's 5.9 Bitcoin was sent to deposit addresses associated with KuCoin.
• ▪Blockchain sleuth ZachXBT tracked the movement of Garrett Dutton's stolen Bitcoin.

Perspective of Apple

• ▪The fraudulent Ledger app appeared on Apple's App Store despite Apple's app review process.
• ▪Apple's App Store hosted a fake Ledger application that facilitated the theft of cryptocurrency.

Perspective of Ledger

• ▪The fake Ledger app collected users' seed phrases, which legitimate Ledger applications never request.
• ▪A fraudulent application impersonated Ledger's brand on the Apple App Store.

2 sources