KuCoin Faces Scrutiny as ZachXBT Links $9.5M Fake Ledger App Scam to Exchange

Blockchain investigator ZachXBT has publicly called out crypto exchange KuCoin, alleging it was used to process $9.5 million in stolen funds from victims of a fake Ledger Live app. The scam, which involved over 50 victims, saw stolen crypto traced directly to deposit addresses on KuCoin. ZachXBT's investigation, shared on Telegram and X, further identified over 150 addresses tied to a known money laundering service that funneled the illicit funds to the exchange, raising serious questions about its compliance and deposit screening processes.

The scam's initial exposure came from an unlikely source: Garrett Dutton of the band G. Love & Special Sauce. Dutton took to social media to reveal he lost his retirement fund—5.9 Bitcoin worth roughly $440,000—after being tricked into entering his seed phrase into a malicious app that was, until recently, available for download on Apple's official App Store. His public account detailed how the funds were drained "in an instant," highlighting the sophisticated nature of the honeypot operation that bypassed Apple's storefront security.

The incident places significant pressure on multiple entities. For KuCoin, the direct tracing of stolen funds to its platform invites scrutiny over its role in potentially facilitating the laundering of stolen assets. For Apple, the prolonged availability of a fake, high-profile crypto wallet app on its curated App Store represents a major security failure that undermines user trust. The case underscores the persistent vulnerabilities in the crypto ecosystem, where even official distribution channels can be compromised, and exchanges remain critical pressure points for illicit fund flows.