Bitcoin
Bitcoin (BTC)
$84,035.00 -0.65043
Bitcoin price
Ethereum
Ethereum (ETH)
$1,924.03 0.53994
Ethereum price
BNB
BNB (BNB)
$614.09 3.47572
BNB price
Solana
Solana (SOL)
$134.78 0.07781
Solana price
XRP
XRP (XRP)
$2.38 -1.2283
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000128 0.48386
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000071 0.45673
Pepe price
Bonk
Bonk (BONK)
$0.0000109 -0.2494
Bonk price
dogwifhat
dogwifhat (WIF)
$0.496032 -2.24479
dogwifhat price
Popcat
Popcat (POPCAT)
$0.200145 3.73914
Popcat price
Bitcoin
Bitcoin (BTC)
$84,035.00 -0.65043
Bitcoin price
Ethereum
Ethereum (ETH)
$1,924.03 0.53994
Ethereum price
BNB
BNB (BNB)
$614.09 3.47572
BNB price
Solana
Solana (SOL)
$134.78 0.07781
Solana price
XRP
XRP (XRP)
$2.38 -1.2283
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000128 0.48386
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000071 0.45673
Pepe price
Bonk
Bonk (BONK)
$0.0000109 -0.2494
Bonk price
dogwifhat
dogwifhat (WIF)
$0.496032 -2.24479
dogwifhat price
Popcat
Popcat (POPCAT)
$0.200145 3.73914
Popcat price
Bitcoin
Bitcoin (BTC)
$84,035.00 -0.65043
Bitcoin price
Ethereum
Ethereum (ETH)
$1,924.03 0.53994
Ethereum price
BNB
BNB (BNB)
$614.09 3.47572
BNB price
Solana
Solana (SOL)
$134.78 0.07781
Solana price
XRP
XRP (XRP)
$2.38 -1.2283
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000128 0.48386
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000071 0.45673
Pepe price
Bonk
Bonk (BONK)
$0.0000109 -0.2494
Bonk price
dogwifhat
dogwifhat (WIF)
$0.496032 -2.24479
dogwifhat price
Popcat
Popcat (POPCAT)
$0.200145 3.73914
Popcat price
Bitcoin
Bitcoin (BTC)
$84,035.00 -0.65043
Bitcoin price
Ethereum
Ethereum (ETH)
$1,924.03 0.53994
Ethereum price
BNB
BNB (BNB)
$614.09 3.47572
BNB price
Solana
Solana (SOL)
$134.78 0.07781
Solana price
XRP
XRP (XRP)
$2.38 -1.2283
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000128 0.48386
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000071 0.45673
Pepe price
Bonk
Bonk (BONK)
$0.0000109 -0.2494
Bonk price
dogwifhat
dogwifhat (WIF)
$0.496032 -2.24479
dogwifhat price
Popcat
Popcat (POPCAT)
$0.200145 3.73914
Popcat price

Over 13k Android and iOS crypto wallets compromised by malicious app: SlowMist

Dorian Batycka
Edited by
News
Over 13k Android and iOS crypto wallets compromised by malicious app: SlowMist

Blockchain security experts uncovered a malicious mobile app that stole sensitive wallet data from users’ devices, leading to the theft of over $1.8 million in cryptocurrency.

A fake app called BOM stole over $1.82 million in crypto by secretly accessing users’ private keys and mnemonic phrases, according to blockchain security firms SlowMist and OKX Web3 Security. In a Feb. 27 research report, SlowMist reported that the first unauthorized transactions with the app were noticed on Feb. 14.

Over 13k Android and iOS crypto wallets compromised by malicious app: SlowMist - 1
Analysis of stolen funds movement from the BOM creator across multiple DEXs | Source: SlowMist

On-chain analysis showed identified main leaks, which led to further revealing that BOM was in fact a scam app luring victims into giving file access. Once granted, the app scanned device storage, took wallet data, and sent it to a remote server.

The app asked for unnecessary permissions, like access to photos and media, what security experts called a “highly suspicious” behavior.

“On iOS, the app first requests permissions, deceiving users with a message claiming the access is necessary for normal operation. This behavior is highly suspicious — as a blockchain-related application, it has no legitimate reason to require access to the photo gallery.”

SlowMist

SlowMist tracked stolen funds across multiple blockchains, estimating that the main hacker address (0x49aDd3E…) stole assets from at least 13,000 victims and transferred the funds through BNB Chain, Ethereum, Polygon, Arbitrum, and Coinbase’s Base.

The stolen crypto included Tether (USDT), Ethereum (ETH), Wrapped Bitcoin (WBTC), and Dogecoin (DOGE).

While it’s unclear who is behind the scheme, SlowMist analysts pointed out that the app’s backend services were offline during analysis, suggesting the attackers are already trying to cover their tracks. Some funds were swapped on decentralized exchange platforms such as PancakeSwap and OKX-DEX.