Bitcoin Forum
August 10, 2026, 07:25:22 PM *
News: Latest Bitcoin Core release: 31.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [Warning] Wasabi wallet drainer on App store  (Read 121 times)
Cookdata (OP)
Legendary
*
Online Online

Activity: 1764
Merit: 1452


Not Your Keys, Not Your Bitcoin


View Profile
August 09, 2026, 04:35:03 PM
Merited by BlackHatCoiner (4), Pmalek (3), RGBTC (1), Charles-Tim (1), Kruw (1), Mia Chloe (1), Filicius (1)
 #1


There is a wallet drainer on App store claiming to be Wasabi wallet. Report says 6 BTC has been drained.

https://x.com/thecomfeed/status/2086384392432234613


Help report the app ==>> https://apps.apple.com/ng/app/wasabi-bitcoin-crypto-wallet/id6764505932

Charles-Tim
Legendary
*
Offline

Activity: 2366
Merit: 6484


Leading Crypto Sports Betting & Casino Platform


View Profile
August 09, 2026, 04:48:15 PM
 #2

Apple has become something else since last year and it become more common this year. Ranging from fake apps on App store to malware and device vulnerabilities. The hackers have made it clear now that no device and no application stores are save from what they can do. It is people that should protect themselves.

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
PX-Z
Legendary
*
Offline

Activity: 2268
Merit: 1361


Wallet Transaction Notifier - @txnNotifierBot


View Profile
August 09, 2026, 07:31:29 PM
 #3

So another fake app on App Store, are they blind? Out of reality? They are been tag to any report/post made on X (twitter).

Does the report button/link only shows when you are logged on Apple? Unfortunately i can't see and i dont have an apple id/account.

 
 b1exch.to 
  ETH      DAI   
  BTC      LTC   
  USDT     XMR    
.███████████▄▀▄▀
█████████▄█▄▀
███████████
███████▄█▀
█▀█
▄▄▀░░██▄▄
▄▀██▄▀█████▄
██▄▀░▄██████
███████░█████
█░████░█████████
█░█░█░████░█████
█░█░█░██░█████
▀▀▀▄█▄████▀▀▀
Cookdata (OP)
Legendary
*
Online Online

Activity: 1764
Merit: 1452


Not Your Keys, Not Your Bitcoin


View Profile
August 09, 2026, 08:06:10 PM
 #4

Does the report button/link only shows when you are logged on Apple? Unfortunately i can't see and i dont have an apple id/account.


Do you know what's so silly about Apple and the App store? You can't report an app on the App store directly, you will have to click " Report a problem", where you will be redirected to a website. You need your Apple account to log in to report the problem, that's not even the problem.

The frustrating part of Apple is that you can't report an app that you don't have on your account, and I don't want to download a drainer on my phone. I have tagged app store and reshared on X like others have done.








Sandra_hakeem
Legendary
*
Offline

Activity: 1596
Merit: 1109


Leading Crypto Sports Betting & Casino Platform


View Profile WWW
August 09, 2026, 08:18:24 PM
 #5

Apple, as a multi-billion dollar cooperation has failed to protect its users, but that doesn't mean you should give yourself in to become a victim--- SAVE YOURSELF, AS YOU SHOULD lest those hungry raptors swoop in and get you.
How do these developers navigate their way to success, or how has Apple become this vulnerable? Pretty easy. A lazy cyber crew stands no chance against them. They have been able to circumvent, and have made good use of the lags between.

Quote
Developers submit harmless placeholder apps—like calculators, simple games, or to-do lists—to pass the automated and human screening. Once approved and listed on the App Store, the developers dynamically alter the application's interface, or redirect users to external phishing links that mimic the official crypto platforms. Apps dynamically shift behaviors post-approval undetected

Long story short, always read between the lines when you're trying to download a new wallet. Also check for misspelled app names. Speaking of wallets, it gets trickier for some since wasabi is a hot wallet by default and automatically stores private keys to their device (which isn't air-gapped)

[Always remember, nobody got you better than you got yourself. Read, learn and understand that this is a pandemic]


..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
PX-Z
Legendary
*
Offline

Activity: 2268
Merit: 1361


Wallet Transaction Notifier - @txnNotifierBot


View Profile
August 09, 2026, 08:21:02 PM
 #6

The frustrating part of Apple is that you can't report an app that you don't have on your account, and I don't want to download a drainer on my phone. I have tagged app store and reshared on X as others have done.
BS way of doing things, don't they have UX? or any design team for people to report the app easily? Or they don't really just want people file a report and doesn't want to handle them.

I see it should be reported here https://reportaproblem.apple.com/ but it needs to create an account first, even mobile number is needed which im not fan of doing so, its not even required on Google registration.

 
 b1exch.to 
  ETH      DAI   
  BTC      LTC   
  USDT     XMR    
.███████████▄▀▄▀
█████████▄█▄▀
███████████
███████▄█▀
█▀█
▄▄▀░░██▄▄
▄▀██▄▀█████▄
██▄▀░▄██████
███████░█████
█░████░█████████
█░█░█░████░█████
█░█░█░██░█████
▀▀▀▄█▄████▀▀▀
Mia Chloe
Legendary
*
Online Online

Activity: 1162
Merit: 2274


Contact me for your designs...


View Profile
August 09, 2026, 08:28:01 PM
 #7

How the heck is this even possible. I'm honestly so disappointed at the fact that these stores have become too money minded they don't even care about their users. And in their next release you see them blabbering about security and other important features when they can't even protect their users from fake apps.

Same thing goes for searches these days scam results can literally pop up as a suggestion just because they pay more than an actual legit service and you see them reluctant about adding important open source software.

Livingleged
Full Member
***
Offline

Activity: 280
Merit: 154



View Profile
August 09, 2026, 09:02:40 PM
 #8


Yesterday I was warning people about a phishing site on google ads that some guy lost his funds after falling for the scam that he inputed this seed online for backup, which happens to be a scam to extract his seed. I was emphasising that you should always go to the App Store to download the wallet because I believe it’s being screened and tested before uploading to the public domain, now it’s another wallet drainer on the App Store it self. One isn’t safe from all this criminal. You will wonder what they are screening before  allowing an app to be uploaded and distributed to the public, this clearly shows that they done value security again they just want to make money from it. And trust me any environment where security is compromised for money always fail, we can’t keep saying this things are mistakes or ignorance I do think some are deliberate. I’m honestly disappointed.

Kruw
Sr. Member
****
Offline

Activity: 1204
Merit: 293


Use Bitcoin anonymously - wasabiwallet.io


View Profile WWW
Today at 01:18:02 AM
Merited by Cookdata (1)
 #9

The legitimate URL for Wasabi is https://wasabiwallet.io/ btw.

The open source repo is here: https://github.com/WalletWasabi/WalletWasabi

Protect your privacy - Coinjoin with Wasabi Wallet
Code:
https://coinjoin.kruw.io/
Pmalek
Legendary
*
Offline

Activity: 3584
Merit: 9435



View Profile
Today at 07:16:16 AM
 #10

This shouldn't affect anyone who knows the proper way to search for the software they wish to install. As long as the route you take goes over the official website, you should be fine. You are not 100% safe that way either because the official website could have been hacked or the legitimate developers could have gone dark, but that doesn't happen that often. Those who search for apps on Apple's App Store or Google's Play Store will get into trouble sooner or later, especially for things involving money and crypto.

▄▄███████████████████▄▄
▄███████████████████████▄
████████████████████████
█████████████████████████
████████████████████████
████████████▀██████▀████
████████████████████████
█████████▄▄▄▄███████████
██████████▄▄▄████████████
████████████████████████
████████████████▀▀███████
▀███████████████████████▀
▀▀███████████████████▀▀
 
 EARNBET 
| 🏀
 
🏈 🏓
 
🎯 🥊
 
 🎾
 
 🏐
 
🏏 🏎️
|


███████▄▄███████████
████▄██████████████████
██▀▀███████████████▀▀███
▄████████████████████████
▄▄████████▀▀▀▀▀████████▄▄██
███████████████████████████
█████████▌██▀████████████
███████████████████████████
▀▀███████▄▄▄▄▄█████████▀▀██
▀█████████████████████▀██
██▄▄███████████████▄▄███
████▀██████████████████
███████▀▀███████████

....HIGHEST....
VIP REWARDS

  G U A R A N T E E D   
| 
 🜲 
KING OF
THE CASTLE

$200K in prizes
| 
..PLAY NOW..
Cookdata (OP)
Legendary
*
Online Online

Activity: 1764
Merit: 1452


Not Your Keys, Not Your Bitcoin


View Profile
Today at 08:12:59 AM
Merited by ABCbits (1), Kruw (1)
 #11

The legitimate URL for Wasabi is https://wasabiwallet.io/ btw.

The open source repo is here: https://github.com/WalletWasabi/WalletWasabi

The app has been taken down. Speaking of the website, the attacker included a website link that is different from the official Wasabi.

Code:
https://wasabimobile.com/



Details from https://www.whois.com/whois/wasabimobile.com say the website was registered a month ago. There is nothing about Wasabi on the website, it's full of hyperlinks to other websites like Bitcoin Wiki, Mastering Bitcoin and others, there is not a single post or link about official Wasabi.

Filicius
Sr. Member
****
Offline

Activity: 714
Merit: 381


ENG>SPA translator


View Profile
Today at 08:45:59 AM
 #12

Those who search for apps on Apple's App Store or Google's Play Store will get into trouble sooner or later, especially for things involving money and crypto.

The thing is that there was a huge difference between the App Store and Google Play, and not only users but also devs paid a premium for accessing or being available in the former because it was a supposedly more secure ecosystem.

Between downloading the application from a website that could be compromised or doing it from the App Store there was supposedly a difference. Now it turns out that the safest thing to do is to search directly for the app on the web. Undoubtedly, times have changed :/

▄▄███████████████████▄▄
▄███████████████████████▄
███████████████████████
████████▄▄▄▄██▀▄███▄███
███▄▄██▀▀██▀██▐██▀▀▀▀▀██
████▀█████▌██▄█▀▄▄███▌██
▐█████▐██▄▄█▀▄██▀█████
██▀▀▀▀██████████▌███████
████████▌████████▄▄█████
███████▀██████▄▀▀▀▀▀████
████████████▀██████▀█████
▀███████████████████████▀
▀▀███████████████████▀▀

Kings Game


 
🎰


 
🎲


 
████
██
██
██
██
██
██
██
██
██
██
██
████
████████████████████████████


 RAKEBACK
.UP TO 30%..
████████████████████████████
████
██
██
██
██
██
██
██
██
██
██
██
████
████
██
██
██
██
██
██
██
██
██
██
██
████
████████████████████████████
 
500%
WELCOME BONUS
+ 250 FREE SPINS
████████████████████████████
████
██
██
██
██
██
██
██
██
██
██
██
████
██████
██
██
██
██
██
██
██
██
██
██
██
██████

  WIN NOW  
██████
██
██
██
██
██
██
██
██
██
██
██
██████
FinneysTrueVision
Legendary
*
Offline

Activity: 2478
Merit: 1190



View Profile
Today at 09:01:12 AM
Merited by Cookdata (1)
 #13

The fake wallet has been around for months and it took until somebody lost 6 BTC and the story started getting lots of attention that Apple finally removed it. The hacker has only moved a small part of the funds, which they bridged to Ethereum address 0xDDc3804De99456A8F7E2083EEE63AeF93dD3E612. If that address belongs to the hacker, they might have been successful in scamming other victims for smaller amounts previously.

▄▄███████████████████▄▄
▄███████████████████████▄
████████████████████████
█████████████████████████
████████████████████████
████████████▀██████▀████
████████████████████████
█████████▄▄▄▄███████████
██████████▄▄▄████████████
████████████████████████
████████████████▀▀███████
▀███████████████████████▀
▀▀███████████████████▀▀
 
 EARNBET 
██
██
██
██
██
██
██
██
██
██
██
██
██
███████▄▄███████████
████▄██████████████████
██▀▀███████████████▀▀███
▄████████████████████████
▄▄████████▀▀▀▀▀████████▄▄██
███████████████████████████
█████████▌██▀████████████
███████████████████████████
▀▀███████▄▄▄▄▄█████████▀▀██
▀█████████████████████▀██
██▄▄███████████████▄▄███
████▀██████████████████
███████▀▀███████████
██
██
██
██
██
██
██
██
██
██
██
██
██


▄▄▄
▄▄▄███████▐███▌███████▄▄▄
█████████████████████████
▀████▄▄▄███████▄▄▄████▀
█████████████████████
▐███████████████████▌
███████████████████
███████████████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

 King of The Castle 
 $200,000 in prizes
██
██
██
██
██
██
██
██
██
██
██
██
██

 62.5% 

 
RAKEBACK
BONUS
ABCbits
Legendary
*
Offline

Activity: 3696
Merit: 10278



View Profile
Today at 09:50:26 AM
 #14

--snip--
Details from https://www.whois.com/whois/wasabimobile.com say the website was registered a month ago. There is nothing about Wasabi on the website, it's full of hyperlinks to other websites like Bitcoin Wiki, Mastering Bitcoin and others, there is not a single post or link about official Wasabi.

I visited that website, but also didn't see anything obvious wrong information either. The only obvious shady stuff is they claim to be "Independent educational resource" while  they themself as "Wasabi Mobile App Education". I tried subscribing to their newslatter with few temporary emails, but none of them receive the confirmation email.

I still believe the website is also owned by people who create the fake wasabi iOS app, but i can't even speculate goal of this website.

RGBTC
Legendary
*
Offline

Activity: 2758
Merit: 1117


NO KYC Exchanger☝️


View Profile WWW
Today at 11:00:40 AM
 #15

I still believe the website is also owned by people who create the fake wasabi iOS app, but i can't even speculate goal of this website.
I think it's part of the requirements for submitting an application to the appstore, I saw several points in the Metadata filling section that requires attaching certain web pages(*).

And scammer have made major changes to the web content there after the application was approved, who knows.

*) https://scand.com/company/blog/how-to-submit-app-to-app-store/

 
 b1exch.to 
  ETH      DAI   
  BTC      LTC   
  USDT     XMR    
.███████████▄▀▄▀
█████████▄█▄▀
███████████
███████▄█▀
█▀█
▄▄▀░░██▄▄
▄▀██▄▀█████▄
██▄▀░▄██████
███████░█████
█░████░█████████
█░█░█░████░█████
█░█░█░██░█████
▀▀▀▄█▄████▀▀▀
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!