- Schwartz reported a notification linking to a page requesting wallet recovery words.
- The notification’s origin remains unclear; a platform compromise has not been established.
- SecuX reported restored app service and reiterated its warning against sharing recovery phrases.
Ripple CTO Emeritus David Schwartz has warned about a suspicious Android notification that appeared to come from the SecuX wallet app. He said the message directed users toward a fraudulent page seeking their recovery words. His account raises concerns about phishing, although it does not establish that the wallet provider’s app or systems were compromised.
SecuX wallet notification led to a recovery phrase scam
In an interview marking Evernorth’s Nasdaq debut, Schwartz said tapping the notification initially opened the app normally. He later checked Android’s notification history, where he found the alarming message and its link.
The message claimed a critical vulnerability threatened his funds and urged immediate wallet verification. According to Schwartz, the linked page requested a 12- or 24-word recovery phrase.
Those words can allow someone to restore a wallet and control its funds. Entering them into a fraudulent website can therefore expose assets even without surrendering the physical hardware wallet.
Schwartz warned users never to submit their recovery words. The reported SecuX wallet notification used an urgent security claim to encourage precisely that disclosure.
The notification’s source remains unknown. Available information does not show whether it originated within the app, through an external notification service, or elsewhere. The supplied accounts do not identify confirmed financial losses or establish how many users received similar messages.
SecuX wallet service resumes as notification source stays unclear
On October 16, the provider announced emergency maintenance and a major system upgrade aimed at improving security and stability. It did not explain the underlying issue or establish a connection with the notification Schwartz described
The company subsequently said normal app operations had resumed. Its warnings urged customers to avoid unverified links and watch for messages impersonating support staff.
For SecuX wallet users, the distinction between an app update and a request for recovery words matters. A message presenting itself as a security fix does not prove that the sender has legitimate access or authority.
SecuX’s official website states that the company will never request a recovery phrase. It also tells customers never to share their 24 words with anyone.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. CoinCryptoNewz is not responsible for any losses incurred. Readers should do their own research before making financial decisions.
