Today’s Field Note

Three users are suing Apple after a counterfeit Sparrow Wallet app on the App Store drained more than $1.8M in Bitcoin, and the app allegedly stayed listed even after a $875,000 theft was reported. The lesson repeats: the store badge is not a security review, and mobile wallet installs are a live drainer vector. Separately, the CEX attrition continues, with AscendEX (July 1), BitMEX (July 23), and BitMart (July 26) all winding down inside a month, and BitMart users are already reporting stuck withdrawals on real balances. When an exchange posts a wind-down notice, your withdrawal queue becomes a race, not a right.

Today’s Move

  • If you use Sparrow, install only from sparrowwallet.com and verify the PGP signature. Delete any App Store “Sparrow” and check recent send history on affected addresses.
  • Treat every mobile wallet install as suspect: confirm the developer, download counts, and the official domain before entering a seed. Never restore a hardware wallet seed into a phone app.
  • If you hold funds on BitMart, withdraw now in small confirmed batches rather than one large request, and screenshot every ticket and transaction ID.
  • Audit remaining CEX balances (AscendEX, BitMEX exposure included) and move anything you are not actively trading to self-custody today.
  • Watch for spoofed “migration” and “withdrawal support” phishing tied to these shutdowns. Support will not DM you or ask for your seed.

Resources

  • https://www.coindesk.com/business/2026/07/28/apple-kept-fake-bitcoin-wallet-on-app-store-after-usd875-000-theft-report-lawsuit-alleges
  • https://www.coindesk.com/business/2026/07/28/bitmex-and-bitmart-may-be-first-casualties-of-crypto-trading-slump
  • https://www.reddit.com/r/CryptoCurrency/comments/1v8rl9z/bitmart_withdrawal/
  • Incident trackers (reference standard): Rekt leaderboard · SlowMist Hacked

More: Issues · Field Notes · RTFM

Daily field notes, weekly Issues. Follow @ItsAlreadyPrice or subscribe via RSS.