Oops: Fake Ledger App Siphons $9.5M From Dozens of HODLers, Including a Guy Who Thought His Hardware Wallet Would Save Him

Ah, the sweet irony of hardware wallets. You spend $100+ on a shiny little device specifically designed to keep your crypto safe from hackers, scammers, and your own impulsive trading habits. You pat yourself on the back. "My keys, my coins," you whisper to yourself like some Bitcoin-maximalist mantra. Then you download a fake app from the Apple Store, and your retirement fund vanishes faster than your dignity at an NFT mint. Classic. A fake Mac app masquerading as Ledger's self-custody software managed to drain over $9.5 million in crypto from 50+ users between April 7 and April 13 before Apple finally showed it the door. The app store review team, presumably busy validating whether the next flappy bird clone qualifies as "innovative," missed this one entirely.

On-chain detective ZachXBT—who else would you call?—tracked the stolen funds through 150+ KuCoin deposit addresses connected to AudiA6, a centralized mixing service that charges hefty fees to clean dirty crypto like a very expensive car wash for criminals. Three poor souls each lost more than $1.95 million, with one particularly unfortunate wallet getting absolutely rekt for $3.27 million in USDT. Bitcoin, Solana, XRP, and USDT were all in the mix—because why not diversify your theft portfolio? The thief (or thieves) clearly understood the importance of a balanced portfolio more than most retail investors.

Now here's where it gets personal. Musician G. Love—yes, that G. Love from G. Love & Special Sauce, the guy who's supposed to be vibing through life—got absolutely wrecked too, losing 5.92 BTC worth roughly $447,000. He took to X on April 11 with the kind of post that makes you put down your phone and stare at the ceiling for a minute: "I lost my retirement fund in a hack/scam when I switched my Ledger over to my new computer and by accident downloaded a malicious Ledger app from the Apple Store. All my BTC gone in an instant." The cruelest part? ZachXBT confirmed those 5.92 BTC got laundered through KuCoin deposit addresses, which means some lucky (or unlucky, depending on your ethics) customer service rep at the exchange probably saw those