Fake Wasabi Wallet on App Store Causes User Loss of 6 BTC
A fake Wasabi Wallet application has been listed on Apple's App Store, resulting in at least one user losing approximately 6 bitcoins.
The app, named Wasabi Bitcoin & Crypto Wallet, falsely claims to be developed by zkSNACKs and tricks users into entering their recovery phrases to transfer assets.
The real Wasabi Wallet is developed by zkSNACKs and has only ever provided desktop versions for Windows, macOS, and Linux, never releasing a mobile app.
The victim, previously concerned about security incidents related to Coldcard hardware wallets, transferred about 6.06 bitcoins into the fake app, which were then completely stolen.
This year, the Apple App Store has listed 27 fake cryptocurrency wallet clone applications, with a previous fake Ledger app causing over $9.3 million in losses.
Market mechanisms drive event-driven fund flows to addresses controlled by attackers, with victims directly pressured due to their trust in the App Store review process. Privacy wallet users have become a primary target, as attackers quickly monetize by impersonating brands.
The App Store review process focuses on code security rather than verifying brand ownership, allowing such applications to repeatedly pass through.
Source: Public Information
ABAB AI Insight
zkSNACKs has long operated Wasabi Wallet and promoted the CoinJoin privacy feature. After closing its coordination services in 2024, the project transitioned to community maintenance, consistently adhering to a desktop architecture to avoid mobile computing and bandwidth limitations.
Attackers exploit the well-known privacy wallet brand to direct funds to their controlled addresses, motivated by the desire to quickly acquire high-value bitcoins using the trust dividend of the App Store, without the need for complex malicious code to attract and harvest funds.
Similar cases include a fake Sparrow Wallet app that resulted in three users losing a total of approximately $1.8 million and led to lawsuits, as well as 26 fake wallet applications disclosed by Kaspersky, which are currently in a phase of mobile impersonation expansion.
This essentially represents a trust gap exploited in the reconstruction of the industry chain, where the App Store review mechanism focuses on behavior rather than ownership, making the cost of brand impersonation far lower than the cost of protection, leading to a one-way flow of funds from users to attackers.
ABAB News · Cognitive Law
Trusting platform reviews = handing the keys to strangers
The cost of brand impersonation is lower than real protection
The stronger the privacy tool, the greater the appeal of impersonation