Status report on unauthorized asset transfers in the DCENT App Wallet
We recognize the serious concern this issue has caused. This report is based on the facts confirmed as of September 17, 2026.
The latest DCENT app includes a check to help determine whether action may be required. Please update the app to the latest version and run the check.
POTENTIAL SCOPE OF IMPACT
Based on our technical analysis to date, the primary criteria for potential impact are:
· The recovery phrase was at some point entered into the DCENT App Wallet
· That address has a history of sending (signing) — including token and NFT transfers, token approvals, and dApp transactions
· The signing took place on an app version below 8.1.0 (released 2025-11-05)
· The address is on Bitcoin, Ethereum, XRPL, TRON, an EVM-based network, or another potentially affected chain
The version used at the time of signing is what matters. Receive-only addresses have relatively lower potential impact, but this does not mean all risk is excluded. Unauthorized transactions were first observed on Android; however, the same potential impact applies to iOS.
HARDWARE WALLETS
Connecting your hardware wallet to the app is not affected. Your wallet key stays on the device and is not passed to the app.
This report concerns recovery phrases that were entered into the App Wallet. If a hardware wallet's recovery phrase was ever entered into the App Wallet, please check whether action is required — this applies regardless of whether the recovery phrase was originally created using the App Wallet or a hardware wallet.
WHAT TO DO
If the in-app check indicates that action is required:
1. Update the DCENT app to the latest version through an official app store before moving any assets.
2. Create a new wallet using a completely new recovery phrase. Do not restore or reuse the existing recovery phrase.
3. Move your assets to the new address, including tokens, NFTs, staked assets, and token approval permissions.
4. Do not reuse the existing address for deposits, signing, approvals, or any other purpose.
ONGOING RESPONSE
The matter has been reported to and accepted by Korean law enforcement authorities. DCENT has established a hotline with law enforcement and begun tracing stolen funds with an external security team.
We are also working with exchanges, relevant authorities, and on-chain analytics specialists to trace and pursue the freezing of assets suspected of being stolen.
Whether and when assets can be frozen or recovered depends on actions by authorities and third parties, subsequent blockchain activity, and the outcome of the investigation.
SCAM WARNING
· DCENT does not operate official messenger channels on Telegram, Discord, or similar platforms.
· DCENT does not operate "CTO," "Support," or "Help" accounts.
· No one from DCENT will ask for your recovery phrase, wallet key, or PIN, or instruct you through a direct message to transfer funds.
· Do not enter or provide your recovery phrase, wallet key, or PIN to any account or channel claiming to offer asset recovery or support. Trust only DCENT's official channels.
We will continue to provide updates through this official account as additional facts are confirmed.
Read the full status report, including the response timeline and detailed guidance:
store.dcentwallet.com/blogs/…