A counterfeit cryptocurrency trading app called Padre Terminal has been removed from Apple’s App Store after a blockchain investigator linked one victim’s wallet compromise to the fake iOS app.
The investigator also traced a wider operation that stole approximately $23,000 from 27 Solana wallets, although the method used to access the other wallets has not been established.
Blockchain investigator Iris told BleepingComputer that the counterfeit app prompted users to import their private keys, which could then be used to drain their wallets. Iris said the legitimate Padre trading service, now known as Terminal by pump.fun, operates on the web rather than through an official iPhone app. The investigator has not directly observed the fake app’s wallet-draining screen, so the exact in-app sequence has not been independently documented.
BleepingComputer identified the malicious App Store listing as app ID 6802739263 and reported that its page now returns a 404 error. The publication said it found two apps using the Padre name during its initial review, but identified only the first listing as the malicious app. Users should not assume that every similarly named app is connected to the same operation.
According to Iris, the wider theft operation has drained 27 Solana wallets since October 25, with losses estimated at around $23,000. The investigator traced the funds to a Solana address and reported that the latest theft in the operation occurred at 17:06 UTC on October 29, after the fake App Store listing had been removed. That timeline does not establish that the App Store app was responsible for every affected wallet.
The investigation also tracked the attacker converting 4,070 USDC into SOL before transferring 192 SOL to another wallet. At the time of Iris’s update, the two addresses held a combined 229.66 SOL, and the investigator had not observed the funds being cashed out.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
The incident follows another case involving a fake crypto wallet on Apple’s App Store, in which three users alleged that they lost more than $1.8 million after downloading an impersonating app.
