DCENT app wallet issues urgent security warning

TLDR

DCENTs App Wallet has suffered a security incident involving abnormal asset transfers, and the company has issued an urgent warning to move funds out of the app.

1. DCENT detected suspicious transfers in the DCENT App Wallet and says the issue appears limited to the software app, not most hardware wallets.
2. Users who stored assets in the App Wallet or reused the same recovery phrase in both app and hardware wallets are the primary risk group under DCENTs guidance.
3. The incident fits a broader pattern of wallet and bridge breaches in 2026, highlighting the need for stricter key hygiene and cautious handling of recovery phrases.

Deep Dive

1. Nature And Scope Of The Incident

On 16 Sep 2026, DCENTs developer IoTrust reported abnormal asset transfers involving the DCENT App Wallet and launched an urgent investigation into a suspected compromise of that software wallet. Multiple reports confirm that DCENT used its official channels to tell users to transfer assets as soon as possible to a secure hardware wallet or another trusted wallet address from the App Wallet.

DCENT has stated that the problem currently appears limited to the DCENT App Wallet. Hardware wallets are not considered affected unless the same mnemonic or recovery phrase has been entered into the app and the hardware device, which would expose both to any compromise of the app. The cause, size, and exact attack path were still unknown at the time of the notice, with DCENT promising further updates as the investigation progresses.

Confidence: high because this comes from DCENTs own statements reported by reputable crypto media.

2. Who Is At Risk And Official Guidance

According to DCENTs warning, the highest risk category is:

1. Anyone holding assets directly in the DCENT App Wallet.
2. Anyone who uses the same recovery phrase for both the App Wallet and a DCENT hardware wallet.

DCENT has clarified that hardware wallet users who have only connected the device but never typed their recovery phrase into the app do not need to take action under the current guidance. At the same time, DCENT strongly warns users to be alert to phishing and impersonation: the company says it will never ask for recovery phrases, private keys, or for funds to be sent to compensation or recovery addresses, and notes it has no official support accounts on X.

3. Broader Security Context And What To Watch

The DCENT incident is one of many wallet and bridge security problems reported in 2026, alongside exploits of bridges and other wallet products that have led to significant losses. This reinforces a pattern: software-only or hot wallets, and any environment where recovery phrases are reused, tend to be more exposed than hardware-only setups with segregated keys.

For DCENT users and the wider crypto community, the key things to watch now are: further technical updates from DCENT describing the attack vector and patched versions, any confirmation of total stolen amounts and affected chains, and stronger guidance on how to safely continue using DCENT products. A critical risk is seed reuse: if the same phrase was used across multiple wallets or chains, compromise in one app can cascade into loss across many assets.

Conclusion

DCENTs urgent warning signals a serious, still-unresolved issue in its App Wallet, with particular risk for users who both hold funds in the app and reuse recovery phrases. Until the investigation clarifies the cause and full impact, crypto users should treat software wallets cautiously, avoid reusing seed phrases between apps and hardware devices, and follow only DCENTs official updates when assessing their exposure and next steps.