A faux model of the Ledger Dwell macOS app has stolen $9.5M in cryptocurrency.
A number of cryptocurrency customers have misplaced roughly $9.5 million after a faux Ledger Dwell app on the macOS App Retailer drained their funds.
The world of cryptocurrency has all the time carried important dangers, and even iPhone and iPad customers aren’t resistant to its risks. At times, malicious actors discover methods to steal cash, be it through outright hacking or via a cams designed to empty cryptowallets.
In April 2026, Mac customers have been hit with the latter after downloading a faux model of the Ledger Dwell app from the macOS App Retailer. The faux app was submitted by the writer “Leva Heal,” which has nothing to do with Ledger SAS, the proprietor and developer of the true Ledger Dwell app.
As BleepingComputer factors out, the malicious Ledger Dwell app tricked 50 macOS customers into freely giving their seed and restoration phrases, which let dangerous actors take their funds in a matter of days.
Between April 8 and April 11, three victims ended up dropping greater than one million {dollars} every, the precise quantities being $3.23 million, $2.08 million, and $1.95 million.
In complete, the thieves have been capable of take round $9.5 million earlier than Apple lastly eliminated the app in query from the macOS App Retailer.
Blockchain investigator ZachXBT defined that the scammers used a number of pockets addresses to obtain funds in a number of cryptocurrencies, corresponding to Bitcoin, Ethereum, Tron, Solana, and Ripple.
From these pockets addresses, the funds have been then laundered through greater than 150 deposit addresses on the KuCoin platform. This was allegedly performed with the assistance of a laundering service often called “AudiA6.”
Nevertheless, the KuCoin platform has frozen the accounts allegedly concerned within the cryptocurrency laundering scheme. The accounts are solely frozen till April 20, except authorities ask for an extension, which appears doubtless.
KuCoin is not any stranger to controversy, as in February 2026, Austrian regulators banned the platform from enrolling new customers based mostly within the European Union. As CoinDesk factors out, KuCoin has additionally settled anti-money laundering violations in 2025, when it paid US authorities greater than $300 million.
24 phrases ought to be saved secret
Ledger’s Chief Know-how Officer Charles Guillemet stated in a press release to The Block that the true app “won’t ever ask on your 24 phrases.”
“If anybody, or any app, is asking on your 24 phrases, assume one thing is unsuitable,” added Guillemet. “The one safety that holds is protecting your non-public keys on a devoted {hardware} system with a safe display, like a Ledger signer, and by no means getting into your seed phrase into any app or web site.”
On this case, “24 phrases” refers back to the Ledger 24-word restoration phrase, also referred to as a seed phrase. It is a distinctive record of phrases, created through the preliminary setup course of, which serves because the grasp backup for a consumer’s non-public keys.
Whereas the Ledger Dwell platform has greater than 1.5 million lively customers worldwide as of 2023, solely 50 of them have been fooled by the faux macOS app. It stays to be seen if the victims will ever be reunited with their $9.5 million.
For many cryptocurrency and Mac customers, although, there’s finally little trigger for alarm. That’s, except you downloaded your copy of Ledger Dwell from the macOS App Retailer, through which case AppleInsider suggests you delete it.
The official Ledger Dwell macOS app, now often called Ledger Pockets, is offered on the Ledger SAS web site. It is best to obtain it from the official web site if you wish to maintain your cryptocurrency protected.
Apple has not commented on the matter, and possibly will not.
