DCENT wallet warns of critical security issue

TLDR

D'CENT Wallet has issued a critical security warning after detecting abnormal asset transfers involving its app wallet.

1. The company reported suspicious withdrawals from the D'CENT App Wallet and urged users to move funds to a secure hardware or trusted wallet.
2. The issue appears limited to the mobile app wallet, but users who reused the same seed phrase between the app and a hardware device are also considered at risk.
3. The root cause and scale of the incident are still under investigation, so users should monitor official updates and be cautious of phishing and fake support outreach.

Deep Dive

1. What D'CENT Reported

On 16 September, IoTrust (the company behind D'CENT) published a critical security notice after detecting abnormal asset transfers tied to the D'CENT App Wallet. In its announcement, the team told affected users to transfer assets as soon as possible to a secure hardware wallet or another trusted wallet address, indicating that active exploitation is suspected, not just a theoretical bug.

At the time of the notice, D'CENT said the problem appears confined to the app wallet, with a formal investigation opened to determine the cause, scope, and next steps. The incident was highlighted in a detailed security write-up.

2. Who Is Affected And Immediate Risk

According to D'CENT, users are at risk if:

1. They hold funds in the D'CENT App Wallet.
2. They have ever entered the same mnemonic/seed phrase into both the app and a D'CENT hardware wallet.

D'CENT explicitly stated that users who only connected their hardware device, and never typed the seed phrase into the app, do not need to take action under the current assessment.

3. What To Watch Next And Ongoing Risks

D'CENT has not yet disclosed the exact exploit path or total losses. They have said they are prioritizing the investigation and will publish further guidance once they know the cause, impact, and remediation steps.

Until then, the main risks are:

1. Additional unauthorized withdrawals if the attacker still has a viable path.
2. Impersonators posing as D'CENT support, sending fake recovery tools or links to drain wallets.

Follow only D'CENTs official channels linked from the original security notice, verify URLs carefully, and avoid entering your seed phrase anywhere new while the situation is unclear.

Conclusion

D'CENTs warning suggests an active compromise related to its app wallet, with potential spillover to hardware wallets that shared the same seed phrase. Until the investigation concludes and a root cause is confirmed, treating any seed ever imported into the app as high risk and closely monitoring official updates is the most cautious approach.