On September 16, 2026, South Korean wallet developer IoTrust Co., Ltd. detected abnormal asset transfers involving its DCENT App Wallet. The company urged users to immediately transfer their funds to secure hardware wallets or trusted addresses. The issue stems from a firmware and companion app vulnerability that could allow unauthorized transactions. DCENT is investigating the incident and preparing a software patch, advising users to remain vigilant against phishing scams.
DCENT App Wallet abnormal transfers
- ▪DCENT Wallet detected abnormal asset transfers involving its App Wallet on September 16, 2026, and initiated an urgent investigation.
- ▪DCENT Wallet is developed by IoTrust Co., Ltd., a South Korean cybersecurity company founded by security experts.
- ▪DCENT Wallet stated that its initial findings indicate the abnormal transfer issue is limited to the DCENT App Wallet.
Firmware vulnerability detection
- ▪DCENT is preparing a software update and plans to notify users via the app and email when a verified patch is available.
- ▪DCENT did not publish technical details about the vulnerability or state whether any customer funds have been lost.
- ▪DCENT reported a vulnerability in its wallet firmware and companion mobile app that could allow unauthorized transactions if exploited.
User fund withdrawal instructions
- ▪DCENT recommended immediate asset transfers for users holding any amount in the App Wallet and those reusing the same mnemonic phrase across the App Wallet and a hardware wallet.
- ▪DCENT clarified that users who only connected their hardware device to the app without entering their seed phrase do not need to take action.
- ▪DCENT urged App Wallet users to transfer their assets as soon as possible to a secure hardware wallet or another trusted address.
- ▪DCENT advised users to perform transfers only from trusted devices and to avoid exporting seed phrases or private keys into online environments.
Phishing scam warnings
- ▪DCENT warned users to remain alert for scams, impersonation, and phishing attempts, advising them not to follow transfer instructions from unverified sources.
- ▪DCENT instructed users to rely only on its verified social media channels, including @DCENTWALLETS, @DCENTWALLETS_KR, and @DCENTWALLETS_JP, for official updates.
Recent blockchain security incidents
- ▪Ontology temporarily halted block production on its mainnet on August 31, 2026, as a preventive measure during a security review.
- ▪Cosmos Labs advised Cosmos EVM chains to have validators halt their networks on August 24–25, 2026, due to a security incident affecting the Cosmos EVM module.
- ▪A fraudulent DeFiLlama application listed on Apple's App Store was removed on August 15, 2026, after the DeFiLlama team demonstrated it could drain crypto wallets.
- ▪Payment processor Swiss Bitcoin Pay shut down after disclosing on September 14, 2026, that a malicious user had infiltrated its internal systems.
Story comments
Loading comments…