DCENT wallet warns users after security incident

TLDR

DCENT Wallet has issued an urgent warning after detecting abnormal asset transfers in its App Wallet and is telling affected users to move funds to safer addresses while it investigates.

1. DCENT says the issue currently appears limited to its software App Wallet and users are urged to move assets to a secure hardware or other trusted wallet.
2. Hardware wallets are considered safe unless the same recovery phrase was entered into the App Wallet, in which case DCENT advises treating those funds as exposed.
3. The size and cause of the compromise are still unknown, so users should follow DCENTs official channels closely and be extremely cautious about phishing and impersonation attempts.

Deep Dive

1. Incident Scope And Official Guidance

On 16 Sep 2026, DCENT, a South Korea based wallet provider, published an urgent security notice after detecting abnormal transfers involving its DCENT App Wallet. In that notice, and in posts relayed via its official X account, DCENT urged users to transfer assets as soon as possible to a secure hardware wallet or another trusted wallet address, indicating a serious compromise of the software wallet layer. Reports note that DCENT currently believes the issue is confined to the App Wallet and not to standalone hardware devices, but it has launched a full investigation to determine the root cause and impact.

2. Which Users Need To Act And Why

DCENTs guidance is clearest for two groups. First, anyone holding assets in the DCENT App Wallet is strongly advised to move funds to a secure hardware wallet or another trusted address after updating the app to the latest version. Second, users who reused the same mnemonic or recovery phrase for both the App Wallet and a DCENT Hardware Wallet should assume that phrase is exposed and treat assets protected by it as potentially at risk. By contrast, hardware wallet users who only connected their device and never typed their seed phrase into the app are told no action is currently required. DCENT also emphasizes it will never ask for recovery phrases or private keys and warns that scammers may exploit the incident with fake support messages.

3. Unknowns And What To Watch Next

At the time of the notice, DCENT had not disclosed the total value affected or a confirmed attack vector, only that abnormal transfers were observed and an urgent probe was underway. The company has promised further updates through official channels once the cause and scope are understood. This incident comes amid a broader run of wallet and bridge security problems in 2026, reinforcing how software layers and seed management can become a single point of failure. Watching for DCENTs follow up, plus any independent analyses of the compromise, will help users decide whether to rotate recovery phrases and how much ongoing trust to place in the affected app.

Conclusion

DCENTs warning shows that even well known wallet providers can face targeted attacks on their software stacks, especially where seeds are reused across hot and hardware environments. Until DCENTs investigation is complete, users in the risk categories it has identified should take its guidance seriously, lean on hardware security, and treat any unsolicited request for seeds or funds as a red flag.