Users of the Dcent mobile crypto wallet are facing an urgent security risk after reports of a major exploit that led to the theft of more than $2.5 million worth of XRP from over 1,500 wallet addresses. Cyber Scrilla, a well-known figure in the cryptocurrency community, highlighted this ongoing incident and warned users of the immediate actions needed to protect their assets.
Dcent mobile wallet vulnerability exposed
According to Cyber Scrilla, Dcent notified some users via email that funds were being withdrawn from their wallets without authorization. After reviewing Dcent’s official social media channels, he confirmed that the threat appeared legitimate and ongoing.
The breach specifically affects users who generated or imported their seed phrases through the Dcent mobile wallet application. Security experts indicate that both new users and those who transferred seed phrases from hardware wallets to the mobile app should consider these credentials compromised.
Cyber Scrilla reported that, so far, over 1,500 addresses have been affected by the theft, with losses totaling more than 2 million XRP. He urged immediate vigilance and action for all users interacting with the Dcent mobile wallet.
Cyber Scrilla emphasized that over 1,500 Dcent wallet addresses have suffered losses exceeding $2.5 million in XRP, highlighting a critical vulnerability linked to the use of the Dcent mobile application with exposed seed phrases.
Despite the ongoing investigation, there is currently no evidence that Dcent’s physical hardware wallets themselves have been compromised, provided users have never input the seed phrases into the mobile app.
Mini dictionary: Dcent is a crypto wallet provider offering both hardware and mobile wallet solutions for digital assets such as Bitcoin, Ethereum, and XRP. Hardware wallets are physical devices designed for offline storage of cryptocurrencies, offering enhanced security compared to software or mobile wallets.
Action steps for Dcent users
Cyber Scrilla strongly advised users not to interact with the Dcent app unless it has been updated to version 10.0.0. He recommended immediately creating a new wallet—either on an updated Dcent app or on another trusted platform—and generating a new, unique seed phrase.
After establishing a new wallet, affected users should transfer their digital assets away from wallets that may have interacted with the vulnerable mobile app. This is particularly important for users who originally created or imported seed phrases through the Dcent mobile wallet.
He also provided guidance for users to check which wallet is active within the app. By opening the wallet selection menu and choosing “Manage All Wallets,” users can see if “App Wallet” is listed as the current wallet. If so, Cyber Scrilla urged them to move their funds without delay.
Seed phrase exposure and ongoing threats
Cyber Scrilla stated that the root cause could involve a vulnerability related to seed phrase exposure within the mobile app, although Dcent has not yet confirmed the exact details. Users who created seed phrases on a hardware wallet but imported them into the Dcent mobile application are also advised to move their assets for safety.
To avoid further losses, Cyber Scrilla warned users to distrust any unsolicited messages or emails regarding the vulnerability, as malicious actors may exploit the situation through phishing or scams. He specifically cautioned users not to enter their seed phrases on websites or respond to messages, even if they claim to be from Dcent representatives.
Continued vigilance against suspicious links and unverified instructions was recommended, while the official investigation by Dcent proceeds.
As an added security measure, Cyber Scrilla suggested keeping a backup hardware wallet compatible with all major cryptocurrencies held in the user’s portfolio. This would allow for quick fund transfers in case of future incidents.
| Wallet Type | Status after Breach | Recommended Action |
|---|---|---|
| Dcent mobile wallet | Compromised (if seed generated/imported within app) | Move funds to new secure wallet with unique seed phrase |
| Dcent hardware wallet only | Considered safe (if seed phrase never entered in app) | No action required, but maintain backup hardware wallet |
Owners of wallets with seed phrases ever exposed to the Dcent mobile app are urged to create new wallets with fresh credentials and immediately transfer their funds. Caution is advised regarding potential phishing attempts from scammers posing as customer support.
