● Covered by 1 source · 1 reportMedium impact1 negative
Fake Crypto App on Apple App Store Stole $23K from Solana Wallets
Key points
- Fake Padre Terminal app stole $23,000 from 27 Solana wallets.
- App was available on Apple App Store, now removed.
- Victims lost funds after importing private keys into the app.
- Attacker converted USDC to SOL to prevent freezing.
Malicious App on Apple App Store
A cryptocurrency trading application, Padre Terminal, was identified as malicious after being available on the Apple App Store for iOS devices. This fake app has been connected to the theft of approximately $23,000 from 27 Solana wallets. Blockchain investigator Iris confirmed that at least one victim's wallet was compromised through this specific App Store application.
Method of Compromise and Fund Movement
The malicious app operated by draining cryptocurrency from users' wallets after they imported their private keys into it. The legitimate Padre trading service, now known as Terminal by pump.fun, is exclusively web-based, making any mobile app impersonations fraudulent. The attacker converted 4,070 USDC tokens into SOL on October 29, preventing Circle from freezing the funds. Subsequently, 192 SOL were transferred to a new wallet, with a total of 229.66 SOL held across two attacker wallets at the time of the report.
App Removal and Continued Activity
The malicious Padre Terminal app has since been removed from the Apple App Store, with its listing now returning a 404 error. Despite the app's removal, the associated wallet drainer remained active, with the latest reported theft occurring on October 29. Iris suspects the trading interface of the fake app was served remotely.
Broader Impersonation Concerns
Iris has identified at least five other suspected crypto-brand impersonator apps on the App Store. These include Axiom Pro: Focus, GMGN AI, HyperTerminal-HyperliquidTools, and Pump Fun Tokens & Analitycs, all of which feature seemingly harmless descriptions but pose potential risks.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
A malicious cryptocurrency trading app named Padre Terminal, previously available on the Apple App Store, has been linked to the theft of approximately $23,000 from 27 Solana wallets. The app drained funds after users imported private keys, and while the app has been removed, the wallet drainer remained active.