{"id":71015,"date":"2026-04-12T11:15:06","date_gmt":"2026-04-12T11:15:06","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/philadelphia-musician-g-love-loses-nearly-6-btc-to-fake-ledger-wallet-app-on-apples-app-store-crypto-news-bitcoin-news\/"},"modified":"2026-04-12T11:15:06","modified_gmt":"2026-04-12T11:15:06","slug":"philadelphia-musician-g-love-loses-nearly-6-btc-to-fake-ledger-wallet-app-on-apples-app-store-crypto-news-bitcoin-news","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/philadelphia-musician-g-love-loses-nearly-6-btc-to-fake-ledger-wallet-app-on-apples-app-store-crypto-news-bitcoin-news\/","title":{"rendered":"Philadelphia Musician G. Love Loses Nearly 6 BTC to Fake Ledger Wallet App on Apple&#8217;s App Store \u2013 Crypto News Bitcoin News"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<p><strong>Key Takeaways:<\/strong><\/p>\n<ul>\n<li>Musician G. Love lost 5.92 <span>BTC<\/span> to a fake Ledger app on the Apple Mac App Store on April 11, 2026. The stolen stash at press time is worth $424,175.<\/li>\n<li>Onchain investigator ZachXBT confirmed the stolen funds were reportedly laundered through Kucoin deposit addresses.<\/li>\n<li>Ledger warns users to download software only from ledger.com, never app stores, to prevent seed phrase theft.<\/li>\n<\/ul>\n<h2>G. Love <span>Bitcoin<\/span> Hack<\/h2>\n<p>Garrett Dutton, frontman of G. Love &amp; Special Sauce, <a href=\"https:\/\/x.com\/glove\/status\/2043047396322451700\" target=\"_blank\" rel=\"noopener noreferrer\">publicly disclosed<\/a> the loss the same day on X. He was setting up his Ledger hardware wallet on a new Apple computer when he searched the App Store for the official Ledger Live application. The app he downloaded appeared legitimate. It was not.<\/p>\n<p>The fake app prompted him to enter his 24-word seed phrase, also called a secret recovery phrase. Once he typed it in, the attackers drained his <span>bitcoin<\/span> holdings immediately.<\/p>\n<p>\u201cI had a really tough day today I lost my retirement fund in a hack\/scam when I switched my Ledger over to my new computer,\u201d Dutton wrote on X. He posted the transaction hash and a <span>bitcoin<\/span> address, and asked followers who wanted to help him \u201cre-up\u201d to send funds.<\/p>\n<p>He later confirmed that only his <span>bitcoin<\/span> was affected. No other holdings were involved.<\/p>\n<p>Onchain investigator <a href=\"https:\/\/news.bitcoin.com\/zachxbt-publishes-leaked-dprk-payment-data-showing-1m-monthly-crypto-to-fiat-pipeline\/\">ZachXBT<\/a> quickly <a href=\"https:\/\/x.com\/zachxbt\/status\/2043236481754611837?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">traced<\/a> the funds. He confirmed approximately 5.92 <a href=\"https:\/\/www.binance.com\/en\/price\/bitcoin\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">BTC<\/a> was stolen and allegedly laundered across nine transactions into Kucoin deposit addresses. The transaction records are publicly visible on any <a href=\"https:\/\/www.binance.com\/en\/price\/bitcoin\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">BTC<\/a> <a href=\"http:\/\/www.bitcoin.com\/get-started\/what-is-a-blockchain-explorer\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">blockchain explorer<\/a>.<\/p>\n<p>Public reaction on X was divided. Many users expressed sympathy. Others raised questions about the plausibility of the story, noting that Ledger hardware wallets require physical confirmation on the device itself. Some pointed to the public donation address as a red flag. Dutton clarified he was socially engineered into entering the seed phrase voluntarily, which is the attack vector the scam was designed to exploit.<\/p>\n<p>\u201cI\u2019m not it\u2019s all good,\u201d Dutton <a href=\"https:\/\/x.com\/glove\/status\/2043135121516056723?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">wrote<\/a>. \u201cIt\u2019s just hard to get scammed. F*** all yall haters that called me a liar. I been in the <a href=\"http:\/\/www.bitcoin.com\/get-started\/a-quick-introduction-to-crypto\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">crypto<\/a> circus since 2017. Today they caught me off guard. It was my own damn fault for not being more diligent. But let it serve as a warning. There\u2019s so many scams.\u201d<\/p>\n<p>The incident follows a documented pattern targeting macOS users. Cybersecurity firm Moonlock <a href=\"https:\/\/moonlock.com\/anti-ledger-malware\" target=\"_blank\" rel=\"noopener noreferrer\">reported<\/a> in 2025 on malware designed to replace legitimate Ledger Live installations on macOS and prompt users to enter their seed phrases. Mac App Store searches for \u201cLedger\u201d have returned impostor apps listed by third-party sellers rather than the real developer, Ledger SAS.<\/p>\n<p><a href=\"https:\/\/news.bitcoin.com\/ledger-opens-new-york-city-office-to-scale-us-expansion\/\">Ledger<\/a> has stated for years that its software is only available through ledger.com. The company is not present in consumer app stores. Any app appearing under a different developer name is fraudulent.<\/p>\n<p>The mechanics of this attack are straightforward. A user searches an app store, finds a convincing listing, installs it, and enters their seed phrase when the app requests it. At that point, the attacker has full, permanent access to every wallet derived from that phrase. The hardware wallet itself provides no protection once the seed is exposed.<\/p>\n<p>Self-custody requires that the seed phrase never leave the physical Ledger device. It should only be entered directly on the device during initial setup. Typing it into any app, website, or computer compromises the entire wallet.<\/p>\n<p>As of April 12, 2026, mainstream news outlets had not yet covered the story. <a href=\"https:\/\/news.bitcoin.com\/\">Bitcoin.com News<\/a> was the first to report on the incident. G. Love indicated he would move forward and expressed gratitude for his health, family, and music career, including a recent performance at Tortuga Fest.<\/p>\n<p>No legal action has been announced.<\/p>\n<\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/philadelphia-musician-g-love-loses-nearly-6-btc-to-fake-ledger-wallet-app-on-apples-app-store\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways: Musician G. Love lost 5.92 BTC to a fake Ledger app on the Apple Mac App Store on April 11, 2026. The stolen stash at press time is worth $424,175. Onchain investigator ZachXBT confirmed the stolen funds were reportedly laundered through Kucoin deposit addresses. Ledger warns [&hellip;]<\/p>\n","protected":false},"author":19,"featured_media":71016,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/71015"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=71015"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/71015\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/71016"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=71015"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=71015"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=71015"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}