
Blockchain analytics experts are asking how a fake Ledger app managed to pass Apple’s review process and make it into the App Store - the very app that wiped out the savings of American musician Garrett Dutton, who lost 5.92 BTC after downloading a phishing app and entering his seed phrase.
But fake apps on the App Store are hardly a rare occurrence. A few months ago, Tech Transparency Project published a detailed report showing that dozens of apps linked to entities on the U.S. OFAC sanctions list were available in the official Apple and Google app stores. In many cases, these apps were disguised as something else - and went unnoticed.
If apps connected to sanctioned organizations - where any interaction may violate serious legal restrictions - can slip through, it’s no surprise that other malicious apps find their way in as well.
Centralized app stores were meant to protect users from exactly the kind of situation Garrett Dutton faced. But centralization cannot solve this problem.
When you self-custody your funds, no one but you is responsible for their security. And that’s a challenge not everyone is prepared for.