Blockchain Report on Nostr: 🚨 Dubai Chinese food delivery app "ComeCome" hit by major security breach! 🚨 ...
🚨 Dubai Chinese food delivery app "ComeCome" hit by major security breach! 🚨
Version 2.9.3 of the app contained malicious "DKStatistics" code that bypassed iOS sandbox restrictions. It secretly accessed crypto wallet, memo, and WhatsApp directories to steal user data.
Users started losing crypto assets as early as August 22nd. One user lost over 50,000 USDT. The attacker's wallet received ~1.3M USDT in 4 days before being laundered via Tornado Cash on August 25th.
This isn't ComeCome's first security issue. In Feb 2025, Kaspersky flagged them for "SparkCat" spyware targeting crypto users.
ComeCome released version 2.9.5 on August 27th. It's unconfirmed if the malicious code is fully removed. Further investigation needed to confirm remediation. #ComeCome #Dubai #Cybersecurity #CryptoTheft #DataBreach #Nostr
Published at
2026-08-27 08:16:38 UTCEvent JSON
{
"id": "d4b8246768718239d35b0ddb70fd66f217161e4c444065aa2dd290504ef3b49b",
"pubkey": "c215990326b98e7fff0ccbc865c159332802d9fd39ffa281ec0f8949bd2a3113",
"created_at": 1787818598,
"kind": 1,
"tags": [],
"content": "🚨 Dubai Chinese food delivery app \"ComeCome\" hit by major security breach! 🚨\n\nVersion 2.9.3 of the app contained malicious \"DKStatistics\" code that bypassed iOS sandbox restrictions. It secretly accessed crypto wallet, memo, and WhatsApp directories to steal user data.\n\nUsers started losing crypto assets as early as August 22nd. One user lost over 50,000 USDT. The attacker's wallet received ~1.3M USDT in 4 days before being laundered via Tornado Cash on August 25th.\n\nThis isn't ComeCome's first security issue. In Feb 2025, Kaspersky flagged them for \"SparkCat\" spyware targeting crypto users.\n\nComeCome released version 2.9.5 on August 27th. It's unconfirmed if the malicious code is fully removed. Further investigation needed to confirm remediation. #ComeCome #Dubai #Cybersecurity #CryptoTheft #DataBreach #Nostr",
"sig": "449a451816cb4aca8eddf58bcfb139a28a3da4bbaf080c68c8199088633147889bee886ad322d663b0abdecfa657a6f10f00d107b389e42b26c1710bad9a5f1d"
}
