DCENT App Wallet users urged to update after abnormal XRP transfers detected
In brief
- DCENT App Wallet users must update to v10.0.0 after abnormal transfers detected
- 6,160 potential victim addresses identified with 9.3 million XRP stolen
- Users should move assets to new secure wallet and avoid transactions until updated
Security Incident Scope
DCENT detected abnormal transfers involving its software-based App Wallet and launched an investigation identifying potential impact across several networks. The incident affects users who either use the DCENT App Wallet directly or have ever entered or restored their hardware wallet recovery phrase within the application.
An XRPL intelligence account identified 6,160 potential victim addresses and 9.3 million XRP stolen. Of that amount, 2 million XRP are held in tracked wallets while 7 million XRP were sent to unidentified services, making recovery more difficult.
Immediate Actions Required
DCENT urges App Wallet users to update to v10.0.0 and run a check to determine if action is needed. Users should not make any transactions through the App Wallet before updating. The company emphasized that the most important step is to move assets out of the DCENT App Wallet to a secure wallet created with a new recovery phrase.
Two wallets have been identified collecting issued tokens stolen from DCENT App users: one holds RLUSD and another holds multiple XRPL-issued tokens. Token issuers have been urged to freeze the affected trust lines to prevent scammers from moving these assets.
Scam Prevention Warning
DCENT continues to warn that it has separate support accounts on X and no official Telegram or Discord support channels. The company will never request recovery phrases or wallet keys from users. Anyone contacted through unofficial channels claiming to represent DCENT should be treated as a potential scammer.
