Fake iOS Crypto App Linked to $23,000 Stolen From 27 Solana Wallets
Summary
A fake Padre Terminal iOS app has been linked by investigator Iris to about $23,000 stolen from 27 Solana wallets. Iris confirmed one victim was compromised through the app; the app was removed, but other thefts’ access paths are unknown.
Key points
- Iris confirmed one victim was compromised through the fake Padre Terminal app; how the other affected wallets were compromised is unknown.
- The researcher says the app drains wallets after users import their private keys.
- Iris attributed about $23,000 in theft from 27 Solana wallets to the operation since October 25, 2026; the app was removed from the App Store, but the drainer was reportedly still active afterward.
- Iris identified four other suspected crypto-brand impersonator apps. Theft allegations appeared in reviews, but Iris had not independently confirmed theft involving those apps.
- A script on a fake Axiom website contained backend addresses associated with Axiom, Aster, and GMGN impersonators; Iris said Padre Terminal was not linked to that cluster.
- Users are advised to reach app listings through projects’ official websites and to be cautious of apps with few downloads or reviews, or publishers with unrelated names.
Article Details
- Event Type
- A fake cryptocurrency trading app distributed through the Apple App Store was linked to cryptocurrency wallet theft.
- Impact
- The app was linked to approximately $23,000 stolen from 27 Solana wallets. Iris confirmed that one victim was compromised through the app but had not determined how the other wallets were compromised. The app reportedly drained wallets after users imported their private keys. Apple removed the app, but the drainer remained active, with the latest reported theft occurring at 17:06 UTC on October 29, 2026.
People
Vendors
Products
App StoreFake crypto app on Apple App Store linked to $23K wallet theftPadre TerminalA fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of approximately $23,000 from 27 Solana wallets.pump.funIt was later renamed Terminal by pump.fun, a platform focused on creating, buying, and selling cryptocurrency “meme coins” on the Solana blockchain.SolanaA fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of approximately $23,000 from 27 Solana wallets.TerminalA fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of approximately $23,000 from 27 Solana wallets.