# Seed Phrase · Drain Watch

7 incidents, 1 live. JSON: https://drains.watch/t/seed-phrase.json · RSS: https://drains.watch/t/seed-phrase/feed.xml

- [D'CENT app-wallet users drained of over $18M as compromised seeds hit XRP, Ethereum, Bitcoin and Tron](https://drains.watch/i/dcent-app-wallet-seed-compromise-sep-2026) (live, Critical, Still active, since Sep 15, 2026)
- [Microsoft: USB-spread 'CryptoBandits' clipper swaps wallet addresses and steals seed phrases over Tor](https://drains.watch/i/cryptobandits-usb-worm-clipper-tor-jun-2026) (closed, High, Still active, since Jun 17, 2026)
- ['Ill Bloom' weak-randomness flaw lets attackers sweep about $5M from software-wallet seeds, Solana included](https://drains.watch/i/ill-bloom-weak-seed-randomness-drains-may-2026) (closed, Critical, Still active, since May 27, 2026)
- [Kaspersky finds 26 'FakeWallet' apps on Apple's App Store stealing wallet recovery phrases](https://drains.watch/i/kaspersky-fakewallet-26-ios-apps-apr-2026) (closed, High, Partly contained, since Apr 20, 2026)
- [Fake Ledger Live app on Apple's Mac App Store stole about $9.5M in seed-phrase thefts](https://drains.watch/i/fake-ledger-live-mac-app-store-9-5m-apr-2026) (closed, Critical, Partly contained, since Apr 8, 2026)
- [Hijacked Snap Store publisher accounts push fake Exodus, Ledger Live and Trust Wallet apps](https://drains.watch/i/snap-store-fake-wallet-updates-expired-domains-jan-2026) (closed, High, Still active, since Jan 21, 2026)
- [Trojanized Trust Wallet Chrome extension v2.68 steals seed phrases; $8.5M drained from 2,520 wallets](https://drains.watch/i/trust-wallet-extension-v2-68-seed-theft-dec-2025) (closed, Critical, Contained, since Dec 24, 2025)