Two bitcoin thefts, totaling more than $1.7 million, sit at the heart of a fresh legal battle that accuses Apple of maintaining a dangerous fake wallet application in its store long after the first theft was flagged, according to the original report . The lawsuit, filed on behalf of two victims, claims the tech giant shrugged off a direct theft report, setting the stage for a second, nearly identical loss.
The first user allegedly downloaded what appeared to be a trusted Bitcoin wallet from the App Store and later saw $875,000 drained. That victim immediately contacted Apple, providing proof of the theft and identifying the malicious app. Instead of pulling the software, Apple allegedly left it live, and within a short window, a second user in a different jurisdiction downloaded the same app and lost roughly $840,000. The filing paints a picture of a company that prioritized platform fees and a frictionless developer experience over basic consumer safeguards.
Why the Timing of the First Report Matters
The gap between the initial theft and the second incident is crucial. Had Apple acted on the first user’s report, the second theft might never have occurred. The lawsuit contends that Apple’s app review process, while often touted as a security moat, failed to catch a wallet app that was clearly designed to steal private keys. Once notified, the company’s continued inaction transformed a platform risk into an active liability.
For crypto users, the case cuts deeper. Apple’s walled garden has long been perceived as safer than sideloading, but that assumption breaks when a malicious actor can simply repackage a well-known wallet brand, pass a cursory review, and remain online after being exposed. The incident echoes earlier episodes where fake wallet apps slipped through Google Play and even Apple’s review, but the alleged post-report inertia is what makes this lawsuit unique.
Platform Liability and the Consumer Protection Gap
Digital asset scams frequently exploit gaps between app store governance and actual enforcement. While platforms like Apple argue they are intermediaries, not guarantors, courts have increasingly tested that boundary. The case arrives as U.S. lawmakers debate a landmark crypto bill, with banks pushing back against consumer protection provisions that could reshape liability for gatekeepers of financial software.
No single regulatory body currently oversees how app stores distribute crypto applications, leaving users exposed to a fragmented enforcement landscape. Apple’s historical control over iOS distribution means the company can remove malware swiftly when it chooses, yet its response here appears anything but swift. The lawsuit may pressure Apple to change how it handles reports on financial apps, particularly those handling private keys, where stolen funds are often irreversible.
What Remains Uncertain for Victims and the Industry
The plaintiffs are seeking damages, but tracing stolen bitcoin across wallets and mixers is inherently difficult. Even if a court rules in their favor, recovering the funds will depend on law enforcement’s ability to follow on-chain trails. Legal experts have noted that while the case targets Apple’s negligence, the actual thieves will likely remain anonymous, a fact that puts the burden of restitution squarely on the platform if liability is proven.
For the broader industry, the outcome could influence how other app stores police crypto offerings. A settlement or judgment against Apple might prompt tighter listing requirements for wallet developers, potentially slowing down legitimate innovation while weeding out obvious scams. It could also accelerate calls for custody standards that separate app distribution from key management. For now, the lawsuit serves as a stark reminder that even curated app stores carry risks when crypto assets are involved, and that a platform’s delayed response can double the damage.