Apple
1 incident, 0 live. 197 days since the last new one.
1 drains in the last 12 months
1 drains in the last 12 months
1 drains in the last 12 months
1 drains in 2026
1 drains in 2026
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½
Less More
Past
April 2026 1
-
Critical◐Partly contained
Fake Ledger Live app on Apple's Mac App Store stole about $9.5M in seed-phrase thefts
A fake Ledger Live app for macOS, published on Apple's App Store under the name 'Leva Heal Limited', asked users for their recovery phrase and drained about $9.5M from roughly 50 victims between 8 and 11 April 2026. Apple removed the app and terminated the developer account; KuCoin froze accounts used to launder part of the funds. Ledger's desktop app is only distributed from Ledger's own website, and no Ledger software ever asks for your recovery phrase.
Ledger users who installed 'Ledger Live' from the Mac App Store·Bitcoin, Ethereum, Tron, Solana·$9.5M stolen·Since Apr 8, 2026·
No drains match these filters.