TLDR
D'CENT has disclosed a security breach in its App Wallet and issued an urgent warning for affected users to secure their funds.
- The incident currently appears limited to the D'CENT software App Wallet, with abnormal asset transfers under investigation.
- Hardware wallets are not affected unless the same recovery phrase was typed into the App Wallet using that seed on both.
- Key next steps are following D'CENT's official instructions only, watching for phishing, and monitoring further updates on scope and root cause.
Deep Dive
1. What Happened To D'CENT
On 16 September 2026, D'CENT and IoTrust reported "abnormal asset transfers" from the D'CENT App Wallet and launched an urgent investigation into a suspected security breach in the software wallet. Reports note that users were told to "transfer assets as soon as possible to a secure hardware wallet or another trusted wallet address" while the incident is analyzed, with the compromise size and technical root cause not yet publicly detailed. Independent coverage from outlets such as Bitcoin.com and U.Today confirms the notice and the abnormal transfer activity rather than treating it as a rumor.
Treat the D'CENT App Wallet as potentially compromised until there is a clear, confirmed fix and updated guidance from the team.
2. Who Is Affected And How
D'CENT states that the issue appears limited to the App Wallet and does not impact standalone hardware wallets, unless the same mnemonic or recovery phrase was entered into the App Wallet as well. Anyone holding assets in the App Wallet, or who reused the same seed between App and hardware, is in the high risk group D'CENT is warning to secure funds promptly. Users who only paired a hardware device to the app, and never typed their seed phrase into the software, are described as not needing to take action in the current guidance.
The main risk is seed reuse between the App Wallet and other wallets, not the hardware device alone, so your exposure depends on where your recovery phrase was ever entered.
3. Phishing Risk And What To Watch
D'CENT explicitly warns users to expect impersonators, stressing that it will never ask for recovery phrases, private keys, or require users to send funds to a special address for recovery or compensation. Coverage also notes that D'CENT has no official support accounts on X, so unsolicited DMs or posts claiming to be support are red flags. From here, the key things to watch are: an official technical postmortem from D'CENT, an app update that specifically addresses the breach, and any confirmation of which chains or assets were most affected.
The immediate technical incident matters, but the bigger ongoing risk is secondary scams that prey on worried users, so treat all inbound messages and links as untrusted unless verified through D'CENT's official site or app.
Conclusion
The D'CENT incident is a targeted software wallet breach that so far does not implicate hardware devices unless seeds were reused, but it highlights how recovery phrase handling and phishing awareness remain critical for self custody. Until D'CENT publishes a full fix and clear remediation path, cautious users should assume the App Wallet environment is high risk and rely only on verified official channels for any further instructions.
CoinsKid.Com