XRP Community on Alert as Web3 Crypto Wallet Reports Security Breach

XRPL Korea, an XRP Ledger Korean Developer Community on X, shared an important security notice from DCENT Wallet, in which the wallet provider said it detected abnormal asset transfers involving its App Wallet and is currently conducting an urgent investigation.

Based on its initial findings, DCENT said the issue appeared to be limited to its App Wallet.

In the wake of the security incident, DCENT highlighted two scenarios in which users might need to move their funds urgently.

For users who hold any assets, regardless of amount, in the DCENT App Wallet and/or those who use the same mnemonic phrase for both the App Wallet and the hardware wallet, DCENT strongly recommends that they transfer their assets as soon as possible to a secure hardware wallet or another trusted wallet address.

While investigating the root cause of the security incident, DCENT urges the crypto community to be on alert for scams. As a warning, users should not send assets to any wallet address provided through DMs or unofficial channels and should not click links or follow transfer instructions from unverified sources.

Launched by the South Korean cybersecurity company IoTrust, DCENT supports numerous coins including XRP.

South Korea’s retail and institutional interest in XRP remains among the strongest in the global crypto market; hence, the update remains significant for the XRP community.

Important update issued

The App Wallet affected by the security incident refers to a software-only mobile wallet that can function independently or pair with the hardware lineup.

In a separate post, DCENT shared an important update regarding its App Wallet. It noted that abnormal asset transfer cases have been identified involving the DCENT App Wallet. So far, there has been no impact originating from DCENT Hardware Wallets themselves.

DCENT has issued guidance for users who need to transfer assets urgently: they should update the DCENT app to the latest version before transferring any assets to a secure hardware wallet or another trusted wallet address. They should never initiate transactions through the DCENT App Wallet before updating the app.

Also, if the same recovery phrase is used in the DCENT App Wallet, action is required regardless of where that recovery phrase was originally generated.

No additional action is required for hardware wallet users if they have never entered or restored their recovery phrase in the DCENT App Wallet.

Users are urged to remain vigilant against impersonation and phishing attempts, as DCENT will never ask for recovery phrases or private keys, nor will it ask them to send assets to a separate wallet address for recovery or compensation. Users should not follow recovery or compensation instructions, wallet addresses, or links sent through DMs, email, social media, or other unofficial channels. ‘DCENT states that it has no official support accounts on X.