DCENT Wallet hack triggers an urgent warning after abnormal App Wallet transfers. Learn who may be affected and what users should do.
Author: Kritika Gupta
16th September 2026- DCENT wallet urged users to move their funds on Wednesday after it detected abnormal asset transfers tied to the DCENT App Wallet. Its maker, the Korean firm IoTrust, opened an urgent investigation and posted the alert on its official X account. So far, the company has not confirmed a dollar total, a victim count, or a cause.
High Signal Summary For A Quick Glance
zach
@zach_from_space
@DCENTWALLETS Sounds like the issue is when you entered same initial seed phrase into more than one device. Why dont you all tell us that?
Important Notice We have detected abnormal asset transfers involving the DCENT App Wallet and are currently conducting an urgent investigation. Based on our initial findings, the issue appears to be limited to the DCENT App Wallet. If either of the following applies to you, we https://t.co/dhDZjmnh9S
10:09 AM·Sep 16, 2026
Positivelife90
@Positivelife90_
@DCENTWALLETS @DCENTWALLETS Unfortunately, this alert came too late for me. Around 7 PM last night, my D’CENT App Wallet was drained through unauthorized transactions. I did not knowingly share my seed phrase, approve these transfers, or authorize any activity at that time. This has been
Important Notice We have detected abnormal asset transfers involving the DCENT App Wallet and are currently conducting an urgent investigation. Based on our initial findings, the issue appears to be limited to the DCENT App Wallet. If either of the following applies to you, we https://t.co/dhDZjmnh9S
09:34 AM·Sep 16, 2026
Edward Corringham
@ECorringham60
@DCENTWALLETS I have only just heard this. Does one have to go via an exchange? Can XRP be sent direct to another wallet - Xaman for example?
Important Notice We have detected abnormal asset transfers involving the DCENT App Wallet and are currently conducting an urgent investigation. Based on our initial findings, the issue appears to be limited to the DCENT App Wallet. If either of the following applies to you, we https://t.co/dhDZjmnh9S
09:14 AM·Sep 16, 2026
High attention and emotional sentiment detected.
The warning matters because the App Wallet is a hot wallet that stores keys on the phone. According to DCENT, the problem appears limited to that software wallet for now. However, anyone who reused the same recovery phrase on a hardware device faces the same risk.
DCENT published its first notice at 04:19 UTC on September 16. The post said the team had detected abnormal asset transfers involving the App Wallet. It also said the issue appears limited to the DCENT App Wallet, based on early findings.
Then, in a follow-up at 09:20 UTC, the company added more guidance. It told users to update the app first, and then move their assets. Notably, DCENT also stressed that it runs no support accounts on X. You can read the first notice and the follow-up post in full on X.
The advice splits users into two groups. First, anyone holding assets in the DCENT App Wallet should move them to a new wallet or a trusted address. Second, anyone who used that same recovery phrase on a hardware wallet should act too.
Meanwhile, hardware-only users can breathe easier. DCENT said those users need no extra action if they never restored the hardware seed into the App Wallet. In other words, the danger centers on any keys that ever touched the software wallet.
The two products work in very different ways. The App Wallet generates and stores the seed on the phone, so it counts as a hot wallet. The hardware device keeps the seed inside a secure element, and it signs each transaction on the device itself.
Because of that split, a software-side bug would not move hardware-only funds. Therefore DCENT’s early theory points at the App Wallet, not the hardware line. Still, a shared recovery phrase collapses that wall, since the same keys then live in two places.
The overlap has a clear cause. DCENT’s own guides let users restore a lost hardware wallet’s seed into the App Wallet. As a result, that convenience can place cold keys onto a hot phone.
Key milestones in the D’CENT Wallet hack investigation
DCENT detected abnormal asset transfers involving its App Wallet and opened an urgent investigation.
DCENT publicly disclosed the incident and said its initial findings pointed to the App Wallet.
DCENT said hardware-only users need no action if they never entered their recovery phrase into the App Wallet.
DCENT told affected users to update the app before moving funds and avoid App Wallet transactions until then.
DCENT has not disclosed the root cause, affected users, stolen assets, impacted chains or total losses.
DCENT has not announced whether affected users will receive compensation for lost assets.
It is the wallet brand of IoTrust, a Seoul company founded in 2017. It launched a fingerprint hardware wallet in 2018, and it later added the free software App Wallet. This month the brand also dropped its apostrophe, moving from D’CENT to DCENT.
IoTrust says its wallets support more than 100 networks and over 10,000 tokens. That coverage includes Bitcoin, Ethereum, XRP, and Solana. The firm has long marketed strong security, which makes this alert especially notable.
Key details are still missing. DCENT has not published any attacker address, victim tally, token list, or dollar total. As a result, outlets such as Bloomingbit repeat the same gaps rather than adding numbers.
On-chain investigators have stayed quiet too. Analysts like ZachXBT, PeckShield, and SlowMist have not posted forensics on this event. Until someone publishes a wallet cluster, the App-Wallet-only framing stays both uncontradicted and unproven.
Meanwhile, the DCENT homepage still shows a “Zero Hacks Since 2018” claim. The company has not updated that banner to match the alert on X.
The incident has already drawn scammers. Fake accounts posing as DCENT engineers are telling users to send a direct message and rekey their wallets. That advice contradicts the official guidance, so treat it as phishing.
DCENT said plainly that it will never DM a recovery address. XRPL validator Vet echoed that caution in a widely shared thread. He advised users to update the app, move funds to a fresh wallet, and avoid re-importing the old DCENT keys.
The crypto community reacted fast, and opinions split three ways. Some users rushed to move their App Wallet balances right away. Others argued that large holdings never belong in a hot wallet in the first place.
The official notice drew about 94,000 views within hours. Many replies also praised DCENT for warning users quickly. Yet the same threads filled with impersonators, which shows how fast attackers move during a scare.
For now, the safest move is simple. Update the app, and then transfer any App Wallet balance to a new seed or a trusted address. Also avoid new transactions from the software wallet until the update is done.
DCENT says it will share the cause, scope, and response once it confirms them. So watch the official @DCENTWALLETS account for verified updates. This is not financial advice, and users should check every instruction against that official channel.
Our Crypto Talk is committed to unbiased, transparent, and true reporting to the best of our knowledge. This news article aims to provide accurate information in a timely manner. However, we advise the readers to verify facts independently and consult a professional before making any decisions based on the content since our sources could be wrong too. Check our Terms and conditions for more info.
