Apple Removes Fake Bitcoin Wallets From App Store After Users Scammed

bitcoinFake Bitcoin wallet apps are routinely leaking through Apple's App Store vetting process, leaving users' accounts at risk of being compromised and their coins stolen.

That's according to developers of the Breadwallet app, who estimate that fake wallets in the App Store have already lost users of the digital currency up to $20,000.

The suspect apps were first identified by the company in a post on Reddit, warning users that at least eight fake wallets on the App Store were using the same, or very similar, names to existing official mobile wallet apps.

The scam apps appeared to be aping portions of source code, icons, and graphics from legitimate apps to fool users into thinking they were using official wallets.

Breadwallet discovered a fake version of its own app which was added to the App Store on July 29, using the same name and icon as the official version. The company took immediate action and contacted Apple to remove the offending app, after customers inadvertently downloaded the fake and reported stolen funds.

"We talked with one customer who claims to have lost about $10,000, and if we go and look at the coin address where those coins were deposited, last I checked there was $20,000 listed at that address," said Breadwallet co-founder Aaron Voisine, speaking to Motherboard. "So, that's our current estimate for how much customers have lost."

Apple has since removed the offending apps listed by Breadwallet, but their appearance on the App Store has left Bitcoin wallet developers and users questioning the robustness of Apple's vetting process for financial apps.

"I think it would be good for Apple to go through some extra process to make sure they have the identity of the person posting any app in the finance section," Voisine said.

Founder of SSL security certificate company BlackCert, John Casaretto, told SiliconANGLE that the Application Development Signing Certificates, the Apple Developer Program, and the application review process had all been negated by a handful of malicious apps making it onto the Store recently.

"For a long time, it seemed as though Apple's tight controls over its ecosystem were a fairly impenetrable measure against nefarious applications, malware, and junk," said Casaretto. "Clearly that is not the case anymore."

Tag: bitcoin


Top Rated Comments

(View all)
Avatar
30 months ago

How should Apple know if a wallet is safe? Since Bitcoin is not run by an established company.

It's Apple's job to know if a Bitcoin app, or any app for that matter, is safe. If they don't know, they shouldn't be putting the apps in the store at all.

Not to say Apple shouldn't take a portion of the blame, but to put the blame entirely in their hands is a little disingenuous.

Who else should share the blame? Apple is the sole arbiter of what goes on the app store. Nothing hits the store without Apple's approval. But seriously, who else should take some of the blame?

Respectfully, I strongly disagree with both of you. Strongly. Whether or not there are difficulties associated with Bitcoin, it's Apple's responsibility to ensure that the apps on the app store are legitimate. Period. If Apple's approval process can't properly vet Bitcoin apps, they should stop approving them until they can get a reliable and consistent process in place.
Rating: 6 Votes
Avatar
30 months ago



"For a long time, it seemed as though Apple's tight controls over its ecosystem were a fairly impenetrable measure against nefarious applications, malware, and junk" said Casaretto. "Clearly that is not the case anymore."


Well it's not as simple as this. Loads of people were making a fuss before about Apple not allowing Bitcoin applications on the App Store and the process being bitterly difficult to get approved, or when the apps were removed.

However I don't remember anywhere when these Bitcoin wallet developers gave Apple clarity about how to appropriately approve these apps - distingush what is fake and real - as they could quite easily be misused; especially as it's a more unorthodox payment method.

Not to say Apple shouldn't take a portion of the blame, but to put the blame entirely in their hands is a little disingenuous.
Rating: 3 Votes
Avatar
30 months ago
Lies.....nothing I can download from the App Store can be bad....as I keep getting reminded on MR ...... ;)
Rating: 2 Votes
Avatar
30 months ago

using the same name and icon as the official version


Here's step 1 Apple: don't approve new apps with the same name as existing apps.
Rating: 1 Votes
Avatar
30 months ago
The currency of the drug-lords and other underworld - now mostly being run from the deeper reaches of China.
[doublepost=1470744089][/doublepost]And in yet ANOTHER Bitcoin hack - $70 million stolen and the value drops by 20% - who in the right mind bothers with this "currency"

https://techcrunch.com/2016/08/02/bitcoin-drops-20-after-70m-worth-of-bitcoin-was-stolen-from-bitfinex-exchange/
Rating: 1 Votes
Avatar
30 months ago
How should Apple know if a wallet is safe? Since Bitcoin is not run by an established company.
Rating: 1 Votes
[ Read All Comments ]