Hacker News new | ask | show | jobs
14,609.911164 XRP stolen Toast Plus on Apple app store
5 points by badinker 1956 days ago
So today I needed to import a private key with around 14600 XRP on it and transfer the money to an exchange. I have a new iphone that doesn't currently have a wallet on it. So I went to the app store and downloaded the first wallet that came up. I did quickly google is toast wallet safe and the results said it was considered safe. So I went ahead and imported the private key and instantly before I could send to the exchange all the XRP was transferred to address: rnmmg1qsvjzitv5toy32dsh8zgdqsw6dzf which is a known scam account.

The software company that produces toast wallet plus also does droplet wallet. "Peninsula Software S.A.S. de C.V."

https://apps.apple.com/us/app/droplet-xrp-spark-wallet/id1526070300#:~:text=Store.-,Peninsula%20Software%20S.A.S.%20de%20C.V.,-Designed

So what to do now? I know the coins are gone but I have a new mission now, to get them taken down. Been buying and selling and mining crypto since 2010 and first time I've gotten scammed. What makes this worse is these weren't my coins, but a friends who wanted me to buy them because he didn't know how. This friend is in a bad situation and needs money now which is why I was converting them.

This is supposedly their address: Peninsula Software Limited 16 Forbes Street Balaclava Dunedin 9011, New Zealand.

11 comments

I got robbed as well , I downloaded Droplet and transferred all my xrp over from bitcoin. The app was deleted the next day and I lost all my xrp I have no idea what to do
i lost 12k xrp.i transfer half from toast wallet to LUNO trading app and the next day i lost everything!!record say the address transfer is rw2ciyaNshpHe7bCHo4bRWq6pqqynnWKQg..everyone dont use toast wallet, its not safe anymore. it scam!
its impossible, you need passphrase with recovery words to able to transfer it. It might be just a bug because toast wallet is shutting down and there's no more support given. Try download another xrp wallet and retrieve account using your 12 recovery words. It happen for me before and it works
try to email to toast wallet support at support@starstone.com.nz. provide the screenshort of the transaction that you didnt do. it happen to my friend before and it's just a bug. do not enter recovery mode or create backup, email first
I have downloaded droplet and I lost all my xrp , I am very hurt this happened and no one can help
Hey I need to know what address your XRP was sent to please. If you can post that here that would be very helpful.
They also have an app called droplet. I lost 207,000 XRP using it. Changed the Binance destination address to the address you mentioned above. I’ve left negative review on apple and contacted apple support but no outcome. This happened November 2020
Also it doesn’t help that no one is talking about this. That app shows up third on App Store when you type in XRP wallets. If you do a quick search on it everyone is saying Toast wallet is the greatest thing since sliced bread (pun intended) I fell for it just as you do. Our private keys were not hacked, that dev is just fucking people who send larger amounts in and letting the little fish keep their money to not attract so much attention. The wallet has over 2 million XRP and all of the transactions in are for larger amounts.
Update - I spoke with New Zealand law enforcement and the address the developer is registered too is likely bogus. Have reported to Apple, Ripple, and authorities here stateside.

I believe there are some breadcrumbs to follow still as I see holes in their setup.

Furthermore, this scammer has one of the richest XRP wallet addresses in the world. Sickens me.

This is the transaction I’m referring to. I even sent 100 XRP tester to check if the app was legit prior to sending the 207,000. Any help would be greatly appreciated. https://bithomp.com/explorer/6C7DD9ECFA5E3F2CC94700E6CAB6452...
I think we should team up and take them down
Hello, this same address stole 19k XRP from me as well last week. It’s the dev from Toast Plus wallet. Let’s pursue this and get our money back.
Yes, working on a way to get them now. Feel free to contact me
great, I have an email listed in my bio. Can you send me a message?
I have tracked down the developer and have their full details. Can you message me on Twitter https://twitter.com/MeneerKrabs ?
Hmmm dont see the email.
I have tracked down the developer and have their full details. Can you message me on Twitter https://twitter.com/MeneerKrabs ?
nkbmartini@gmail.com
For the people reading this: Don't trust iOS apps with anything thing important. They're impossible (or nearly so) to verify and Apple has no visibility into them (they don't even try to do any instrumentation during the "review.")
Website of malicious developer: https://peninsulasoftware.co/

Hit me up so we can investigate this together further. I want them to rot in prison.

nkbmartini@gmail.com

Legit made a 100 XRP transfer to my Toast Plus wallet to make sure it worked, and then sent 19K XRP to hold there until I got my ledger back. Within 5 mins of my 19K landing to the TP wallet, it was transferred out to that address.
A few hours ago another 11,975 XRP has gone to that scam wallet. Any thoughts what to do with that?
This guys fucked