According to xrpl.to, a DEX and analytics platform on the XRP Ledger, the D’CENT App Wallet drain continues, with 640,370 XRP stolen this week.
In a recent X post, xrpl.to noted the D’CENT App Wallet drain is still ongoing, as since September 21, the same keys have taken 640,370 more XRP. Total losses linked to the incident have now reached about 12.4 million XRP across 7,393 wallets.
One notable detail is that 76 wallets were emptied, refilled, and emptied again, suggesting previously drained addresses were subsequently funded before being targeted again.
The recent disclosure adds to concerns for users who may still have funds in the affected D’CENT App Wallet. This has prompted a direct warning to XRP holders: ‘Never send XRP to an old App Wallet address.’
Earlier in September, South Korean wallet provider D’CENT reported unauthorized transactions in its app wallet, with the scope of the impact affecting addresses on the XRP Ledger.
App wallet users urged to take action
D’CENT App users are urged to check whether they are affected. If this is the case, they should move their funds to a newly created secure wallet as soon as possible.
You Might Also Like
A few precautionary measures are highlighted: first, they should update the D’CENT app to the latest version from the official app store; second, they should never make any transactions through the App Wallet before updating; third, they should move their assets to a wallet created with a new recovery phrase and never reuse the old recovery phrase. For hardware wallet users, if their recovery phrase has ever been entered or restored in the App Wallet (software wallet), the same action is required.
Multiple scam warnings have been issued since the D’CENT app wallet exploit was initially reported.
In a recent scam warning, users have been notified that fake D’CENT emails claim their device “missed its update window.” This fake link takes users to a page offering a “Slack” download for macOS devices. Users are urged never to download or install it, as it is not a legitimate D’CENT update. They should instead delete the email.
