D'CENT Wallet Flaw Exposes Thousands of Users to Crypto Theft
D'CENT, a South Korean wallet brand operated by IoTrust, is investigating a series of unauthorized transfers out of its mobile App Wallet. The company first flagged 'abnormal asset transfers' on September 16 and published a preliminary incident report the following day.
According to D'CENT, users are potentially affected if they entered their recovery phrase into the App Wallet, signed any transaction or approval with it, and did so using an app version earlier than 8.1.0, which was released on November 5, 2022.
The company has withheld technical details of the vulnerability, saying that publishing them 'could be used in identical or similar attacks.'
D'CENT says its hardware wallets are unaffected unless a device's recovery phrase was also restored into the App Wallet. The company is telling affected users to create a new wallet with a new recovery phrase and move all coins, tokens, NFTs, and staked positions to it.