Status Report on Unauthorized Asset Transfers in the App Wallet

Authors

DCENT Wallet Team

Beyond Storage

As of September 17, 2026 (KST)

This report is based on the facts confirmed and the response carried out as of September 17, 2026.

We are working with law enforcement authorities, security specialists, the operators and developers of the relevant mainnets, and exchanges to identify and trace the flow of funds related to the unauthorized asset transfers and to seek the freezing of those funds. Whether and when assets can be frozen or recovered depends on actions by authorities and third parties and on the outcome of the investigation.

In parallel, we are carrying out a technical analysis to establish how this issue arose and the potential scope of impact. What has been confirmed to date, together with the potentially affected scope and the actions needed to protect users, is being communicated separately.

However, if specific technical information were made public, it could be used in identical or similar attacks or lead to further harm. To prevent that, we are not disclosing at this time technical details that could affect the investigation or the security response.

If additional facts are confirmed, we will share them through our official channels to the extent that disclosure is possible, taking into account the investigation, the security response, and the protection of users.

01Scope of potential impact

Cases with potential impact

Based on our technical analysis to date, the main potential impact criteria are as follows. The criteria and the scope of affected addresses may change as the analysis is supplemented and as chain-specific characteristics and further findings are confirmed. Irregular transactions were first observed on Android, but the same potential impact applies to iOS.

The full list of chains with potential impact, and how to determine whether your wallet is affected, are set out in How to check whether this applies to you.

02Timeline

All times are Korea Standard Time (KST).

03Ongoing work

• We are working with the relevant authorities to protect user assets and prevent further harm.
• We are working with exchanges, the relevant authorities, and on-chain analysis specialists to freeze and trace assets suspected to be involved. Whether and when those assets can be frozen or recovered depends on the cooperation of third parties and on transaction activity on the blockchain.
• We are applying and verifying additional safeguards, including pre-release verification procedures.

04What users should do

1. Update the app to the latest version.
   Update the app only through the official app stores, and do not use installation files or links sent by text message, social media, or messenger apps. Moving assets without updating may put them at risk.
2. Create a wallet with a new recovery phrase.
   Do not restore a wallet using your existing recovery phrase. Reusing an existing recovery phrase may regenerate the same or a related key, so use a new recovery phrase whether on the app or on a hardware wallet.
3. Move your assets to a new address.
   Check not only native coins but also tokens, NFTs, staked assets, and token approvals separately.
4. Do not reuse your previous address.
   A previous address cannot be deleted from the blockchain, so do not reuse it for any purpose, including deposits, signing, or token approvals.

05Official channels

We will update this page and our official channels as significant findings are confirmed. To check whether your wallet is affected, see How to check whether this applies to you. To move your assets, see the Asset Migration Guide. If you need help, please contact customer support.

This English text is a translation provided for convenience. In case of any discrepancy, the Korean version prevails.

Check whether this applies to your wallet

If it applies to you, follow the Asset Migration Guide to move your assets. If you have questions, please contact DCENT customer support.