Just as that a fake Ledger app had drained millions from App Store users, that another app had been harvesting sensitive user data. Apple pulled both today. Here are the details.

According to , at least 50 people had their Bitcoin, Ethereum, Solana, Tron, and XRP funds stolen between April 7 and April 13, after a malicious app called Ledger Live slipped through review and landed on the App Store.

Three of the largest victims lost seven-figure sums, with $3.23 million in USDT being stolen on April 9, $2.08 million of USDC on April 11 and $1.95 million in BTC, ETH and stETH being drained on April 8.

The report says that the funds were traced to KuCoin deposit addresses associated with Audi A6, “a centralized crypto mixing service known for charging high fees to obfuscate illicit flows.”

CoinDesk says Apple removed the app from the App Store, but didn’t respond to requests for comment. Neither did KuCoin, which has faced legal troubles associated with money laundering violations.

It is not immediately clear how Ledger Lite got past app review, nor why Apple didn’t take action when the first reports of stolen funds began appearing after April 7.

CoinDesk ’s report notes that “the incident may form the basis for a class-action lawsuit,” according to Blockchain investigator ZachXBT.

The Ledger Live case wasn’t the only one to raise App Store concerns today.

According to , Apple pulled a data harvesting app called Freecash from the App Store, after the app “appears to have tricked users as it quickly rose to the top charts” over the past few months.

The report notes that Freecash became popular on TikTok by promising users they could “make money just by scrolling TikTok,” when in reality, users were effectively trading sensitive personal data for rewards:

A Malwarebytes report that the app may collect information about users’ race, religion, sex life, sexual orientation, health, and other biometrics, adding that the app is essentially a data broker looking to match game developers with users who are willing to install and spend money on mobile games. Games promoted on Freecash include Monopoly Go and Disney Solitaire, among others.

The Malwarebytes report came just days after , raising concerns about its misleading marketing and the scope of the user data it may have been collecting.

TechCrunch ’s own investigation, based on data from Appfigures and AppMagic, found that an earlier version of Freecash, published by Almedia GmbH, was removed from the App Store in mid 2024.

Months later, an existing app called Rewards, published by Cyprus-based 256 Rewards Ltd, was rebranded as Freecash and climbed into the top charts, raising questions about whether Almedia used another developer account to return to the App Store.

Here’s TechCrunch :

Almedia’s re-entry into the App Store through another developer account may have been a way of circumventing a ban on the initial Freecash app. Using another developer to re-enter the App Store after a ban is a common, though rule-breaking, tactic. (Almedia’s spokesperson declined to comment about its earlier app takedown.)

about the scam app ecosystem noted this trend, highlighting several fraudulent apps that would disappear from the App Store and then reappear under a different developer account. Other independent have documented as well, and often, scam apps’ owners operate a portfolio of accounts, it’s been reported.

TechCrunch says that Freecash was removed from the App Store after the site reached out to Apple for comment, as it worked on the story:

After TechCrunch reached out to Apple for comment, the company removed Freecash from the App Store for violations of its rules on Monday, citing the misleading marketing. Apple pointed TechCrunch to two , 3.1.2(a) and 2.3.1, which forbid scamming users, engaging in bait-and-switch tactics, and marketing apps in a misleading way.

Almedia, meanwhile, “denied allegations of driving artificial traffic to its platform or using deceptive marketing techniques,” and added that its apps “are fully compliant with the Apple App Store and Google Play Store policies, as demonstrated by the fact that they are live and regularly pass platform reviews.”