$9.5M stolen in crypto scam linked to 150 KuCoin addresses

In a shocking flip of occasions, a faux Ledger Stay app on the Apple App Retailer precipitated losses totaling $9.5 million. 

On the 14th of April, blockchain investigator ZachXBT took to Telegram and highlighted that the theft affected over 50 victims throughout “Bitcoin, EVM, Tron, Solana, & Ripple.”

That mentioned, the illicit exercise was carried out for every week straight, from the seventh to the thirteenth of April.

As reported by ZachXBT, the stolen funds have been funneled by way of greater than 150 KuCoin [KCS] deposit addresses linked to AudiA6,   a centralized transaction mixer that obscures illicit funds by charging greater charges.

Remarking on the incident, the blockchain investigator famous, 

I’d be curious to see if this presents grounds for a category motion towards Apple.

Losses confronted and steps taken

On this theft, three victims confronted large losses price “seven figures every.”

On the eighth of April, one sufferer confronted a lack of $1.95 million, with 20.64 BTC, 211 stETH, and 70 ETH being compromised. Then, on the ninth of April, one other sufferer misplaced $3.23 million in USDT. Lastly, a 3rd sufferer misplaced $2.08 million in USDC on the eleventh of April. 

Subsequently, Apple eliminated the faux app from the App Retailer on the twelfth of April to forestall additional losses.

KuCoin steals the highlight for the unsuitable causes

Evidently, KuCoin has witnessed elevated illicit exercise over the previous yr. As reported earlier by AMBCrypto, Bitcoin Depot not too long ago misplaced $3.66 million. Therein, the stolen funds have been moved to KuCoin deposit addresses.

Furthermore, in January 2025, the U.S. authorities had imposed fines exceeding $300 million on the change “for violating AML legal guidelines.”

In February 2026, ZachXBT reported that Austria’s regulator had barred KuCoin from onboarding new EU customers. Then, in late March 2026, Japan’s Monetary Providers Company (FSA) additionally flagged KuCoin for working with out registration.

General, these incidents highlighted the rising exercise of unhealthy actors, with the FBI’s Web Crime Criticism Middle [IC3] not too long ago reporting $11.36 billion in crypto‑associated fraud losses.

Last Abstract

• Over 150 KuCoin deposit addresses linked to AudiA6 moved the stolen funds, leaving three victims to bear the brunt of this crypto theft.
• KuCoin, over the previous yr, has paid $300 million in fines to the U.S. Authorities.