{"id":"padre-terminal-fake-app-solana-theft-oct-2026","category":"scam","status":"live","title":"Fake Padre Terminal iPhone app on App Store linked to US$23,000 Solana wallet thefts","tldr":"A fake Padre Terminal app on Apple's App Store took imported Solana wallet keys and is linked to about US$23,000 stolen from 27 wallets. Apple removed it. Never import wallet keys into an app; the real Padre/Terminal service is web-only.","summary":"A fake trading app called Padre Terminal appeared on Apple's App Store and impersonated Padre, a Solana meme-coin trading service later renamed Terminal by pump.fun. The real service is web-only, so any mobile app using the name is fake. Blockchain investigator Iris says the wallet drainer has operated since 25 October 2026 and that the app drained wallets after users imported their private keys. About US$23,000 was stolen from 27 Solana wallets, but Iris has confirmed only one victim was compromised through the app. How the other 26 were hit is not known. Apple has removed the listing. A theft was still recorded on 29 October after removal, and the attacker converted the remaining 4,070 USDC to SOL, which prevents Circle freezing it. No recovery of funds has been reported, and no arrests. Iris also named four other suspicious apps, but has not confirmed theft from them. Apple had not answered BleepingComputer's questions at publication.","action":"Never type or import a wallet's private key or recovery phrase into an app. If you did with a Padre or similar app, move your funds to a new wallet created on a trusted device, and install trading apps only from links on the project's official website.","product":"Fake Padre Terminal app (Apple iPhone App Store) impersonating Padre / Terminal by pump.fun","audience":"home","severity":"medium","patch":"na","exploited":true,"cves":[],"tags":["scam","ios","app-store","solana","crypto","wallet-drainer","padre","fake-app"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"news","title":"Fake crypto app on Apple App Store linked to $23K wallet theft","url":"https://www.bleepingcomputer.com/news/security/fake-crypto-app-on-apple-app-store-linked-to-23k-wallet-theft/","by":"BleepingComputer","date":"2026-10-29"}],"started":"2026-10-25","closed":null,"created":"2026-11-03T21:40:17.733Z","updated":"2026-11-03T21:40:17.733Z","cve_notes":[],"timeline":[{"at":"2026-10-29","added":"2026-11-03T21:37:06.107Z","kind":"wider-attacks","text":"A further theft was recorded at 17:06 UTC, after the app was removed. The attacker converted the remaining 4,070 USDC to SOL, which stops Circle from freezing it, and moved 192 SOL to a new wallet. Two wallets held a combined 229.66 SOL and nothing had been cashed out at the time of the update.","url":"https://www.bleepingcomputer.com/news/security/fake-crypto-app-on-apple-app-store-linked-to-23k-wallet-theft/","by":"BleepingComputer","patch":"na"},{"at":"2026-10-29","added":"2026-11-03T21:37:06.107Z","kind":"other","text":"BleepingComputer reports about US$23,000 stolen from 27 Solana wallets linked to the drainer. Iris confirmed only one victim was compromised through the app and has not worked out how the other 26 were hit. Apple had removed the listing, which now returns a 404 error, and had not replied to BleepingComputer's questions.","url":"https://www.bleepingcomputer.com/news/security/fake-crypto-app-on-apple-app-store-linked-to-23k-wallet-theft/","by":"BleepingComputer","patch":"na"},{"at":"2026-10-25","added":"2026-11-03T21:37:06.107Z","kind":"disclosed","text":"Blockchain investigator Iris says the wallet drainer behind a fake Padre Terminal iPhone app has been operating since this date. The app impersonated Padre, the Solana meme-coin trading service now called Terminal by pump.fun, which is web-only and has no mobile app.","url":"https://www.bleepingcomputer.com/news/security/fake-crypto-app-on-apple-app-store-linked-to-23k-wallet-theft/","by":"BleepingComputer","patch":"na"}],"url":"https://hard.fyi/live/padre-terminal-fake-app-solana-theft-oct-2026/","json":"https://hard.fyi/api/live?id=padre-terminal-fake-app-solana-theft-oct-2026"}