[Important] Dcent wallet app users

[OmegaStarScream]

It's still unclear as to what really happened but if you have used the wallet before, read this:

Important Update: Who Needs to Take Action

We’ve published a step-by-step guide to help DCENT users quickly check whether the recent App Wallet action applies to them.

You need to take action if:
• You first installed the DCENT app before Nov 5, 2025, and
• You made transactions using the App Wallet on a version earlier than v8.1.0

You do NOT need to take action if:
• You first installed the app on or after Nov 5, 2025, or
• You only used a DCENT Hardware Wallet (Biometric Wallet, DCENT S, DCENT X)  and never signed transactions with the App Wallet
......
-snip-

This announcement came after Dcent have identified abnormal activity[1] involving the wallet app.

Based on the tweets, the hardware wallet users should not be affected (unless you used the hardware's seedphrase in the wallet app before).

[1] https://x.com/DCENTWALLETS/status/2100152744233648380

[Danish Ali]

DCENT through IoTrust said it's become apparent that abnormal transfers had taken place from the DCENT App Wallet, however, how exactly that occurred and what's the cause has not yet been confirmed.

At this point, it's unclear whether it was the seed phrase itself exposed and if hardware wallets were compromised. The team says hardware wallets with their own seed phrases appear to be okay, however, if you used the same seed phrase, it's advised to make the transfer.

At this time, it's unclear how much money has been taken, how many wallets, what chains were affected, etc. The team says there are scammers pretending to be DCENT support to dupe people into sending assets to a "safe" wallet. Use your own wallet that YOU control and ALWAYS use addresses you've generated and not ones given to you.

More info here as this situation is still actively developing: X: DCENT_Official

While this situation is still playing out and root cause has yet to be confirmed, I'd be careful to call this a closed incident at this point. The bigger risk right now appears to be falling for the scam.

[alani123]

North Korea is going to soon have the world's first nuclear powered destroyer ship.

Another first that most people don't account for is that it's also going to be the first DeFi funded national defense program.

[Upgrade00]

With the exact issue yet to be discovered I would not assume any of their services to be safe even if they say it may otherwise be affected. Just remember to update to the latest version before transferring to a safe wallet.

This is a closed source service which emphasizes the key advice to use reputable open source wallets for storage.

[joniboini]

With the exact issue yet to be discovered I would not assume any of their services to be safe even if they say it may otherwise be affected.

Feels like a deja vu considering I just read another case where trusting the platform is the only option you can take (assuming you can't stop using them somehow) when shit happens. I'd not be surprised if more services dies because they become the next victim of another "hack". Users need to be more aware of things like this even if their existing wallets haven't been subjected to any attacks in the past. Even if you have Binance behind your back, it will take years (if every) for them to return your money in case they got exploited.

[FinneysTrueVision]

More info here as this situation is still actively developing: X: DCENT_Official

That’s not their real account, the real one is already in the original post.


Dcent isn’t the most well known brand for hardware wallets and I wasn’t even aware that they also had a mobile app that allows you to create a hot wallet. That seems counterintuitive for that kind of brand. Now they will be associated with having poor security, even if hardware wallets weren’t affected.

It could be another poor entropy issue, but we will have to wait until there is more information to know the exact cause.

[Danish Ali]

More info here as this situation is still actively developing: X: DCENT_Official

That’s not their real account, the real one is already in the original post.


Dcent isn’t the most well known brand for hardware wallets and I wasn’t even aware that they also had a mobile app that allows you to create a hot wallet. That seems counterintuitive for that kind of brand. Now they will be associated with having poor security, even if hardware wallets weren’t affected.

It could be another poor entropy issue, but we will have to wait until there is more information to know the exact cause.

Good catch! Thanks for pointing it out! Regarding the incident itself, it's not yet known what caused it, but "weak entropy" doesn't seem to make sense to me, since that would have caused the wallet to be drained upon creation, not subjected to days of "abnormal transfers", as described. It's more likely to be a session key compromise, a hacked API, a transaction signing bug, or a trojanized app update, but it'll have to wait for a statement from "DCENT" to know for sure.

Also, that's another place where they screwed up because they're primarily a hardware wallet maker while also running a software hot wallet, so having the same name invites unnecessary confusion when a security issue like this arises. People will be trying to figure out which of their products is affected, which could lead to unnecessary rumors.

[5W-KILO]

I saw that post on twitter days back and I refuse to say anything about it because they don't have the answer if it already affected their hardware wallet users or not, it felt too early to bring it on here.

Today the team already cleared the rumour that...

D'cent Hardware wallet users who never imported their recovery seed into their Dcent app are safe.
This means they have two types of app.

One as standalone d'cent wallet
The other as app for completing transactions via the hardware wallet.

Just like how Keystone hardware wallet has Keystone Nexus.
The solution to those using D'cent standalone wallet app is to update to the latest version already, which has the key fix to this recent vulnerability.

My advice is update to the latest version first before moving your funds out.

[taufik123]

After the Coldcard case became a disaster, more wallets began to show their weaknesses, including this DCENT wallet.
Is this some kind of flow in the chain of hacks that continue to occur and attack hardware wallets and some mobile wallets that initially looked safe but then found some loopholes that were exploited by hackers.

Even the user data of Hardware wallet buyers is also widely spread and becomes a tool to send a lot of phishing randomly.
Create a new trap with existing data.

Now it needs extra vigilance that in fact nothing is completely safe, Anything can happen even if it looks safe.