A fake Ledger Live app stayed up in the App Store long enough to clean out wallets of more than 50 users. Between April 7 and 13, victims collectively lost $9.5M — in Bitcoin, EVM-network tokens, Tron, Solana, and Ripple.
Blockchain investigator ZachXBT was the first to flag the scheme publicly. According to his findings, the stolen funds were laundered through more than 150 KuCoin deposit addresses tied to a service called AudiA6 — a centralized mixer that charges steep fees. The three biggest victims each lost over $1M.
According to Cointelegraph, Apple has since removed the app and banned its developer from the App Store. Company representatives say the fraudsters used a bait-and-switch approach: they initially published a legitimate-looking app, then switched its functionality to a phishing tool designed to steal seed phrases.
KuCoin in the Spotlight Again
ZachXBT points to a sharp rise in illicit activity passing through KuCoin over the past year. In January 2025, the exchange paid U.S. authorities a fine of over $300M for money laundering violations. That November, it received a MiCA license — but by February 2026, Austria's financial regulator had already blocked it from onboarding new European users.
In ZachXBT's view, the Ledger Live incident could be grounds for a class-action lawsuit against Apple.