What allegedly happened?
Three bitcoin users have filed a lawsuit against Apple. According to the filing, an app pulled from the App Store that posed as the Sparrow Wallet allegedly drained their accounts. Combined, they reportedly lost about $1.84 million (according to CryptoSlate and Incrypted).
Sparrow Wallet is a bitcoin wallet with a built-in blockchain explorer. It is officially available for Windows, macOS, and Linux (per Incrypted). The key detail of the whole case: according to the lawsuit, the victims entered their seed phrases (the backup sequence of words that grants full control over a wallet) into the fake app. That is how the attackers gained access to the funds.
Why are the plaintiffs targeting Apple directly?
The lawsuit, filed on July 24 in California, accuses Apple of negligence in vetting and removing apps from the App Store (according to CryptoSlate). The core of the argument is the contradiction between how Apple presents its store as a safe and trustworthy place for software and the fact that a fraudulent app made it through its review process.
According to the lawsuit, this was not an isolated failure:
- Warnings about fake Sparrow apps had, according to CryptoSlate, been appearing for more than two years.
- Based on the framing of the sources, the developer reportedly warned Apple for about a year. This timeline cannot be precisely substantiated from the available summaries, so we treat it as unverified.
The most serious point: the app stayed online even after the theft was reported
The strongest claim in the lawsuit is described by both CoinDesk and CrypS.pl. According to them, Apple left the fake app in the App Store for more than a week after one of the users reported the theft of bitcoin worth $875,000. During that period, according to the lawsuit, another user reportedly lost about $840,000.
In other words: according to the filing, the second major theft could have been prevented if Apple had responded to the first report more quickly. That is exactly the type of claim a court will weigh.
Timeline and financial figures (per the lawsuit)
| Item | Figure | Source |
|---|---|---|
| Lawsuit filing date | July 24, California | CryptoSlate |
| Total reported loss | ~$1.84M | CryptoSlate, Incrypted |
| First reported theft | ~$875,000 | CoinDesk, CrypS.pl |
| Second theft after report | ~$840,000 | CoinDesk |
| Time the app stayed online after report | more than a week | CrypS.pl, CoinDesk |
| Prior warnings about fake Sparrow | more than 2 years | CryptoSlate |
What is not yet confirmed
This is a lawsuit, meaning claims from one side, not facts proven by a court. The available sources do not clarify:
- How Apple is responding to the accusations and what its version of the timeline is.
- Who exactly was behind the fake app and whether the attackers have been identified.
- Whether and exactly how the app bypassed the App Store review process.
- The specific name of the fake app and exactly how long it was available.
We will update these points once verified information appears, ideally directly from the court filing or from a statement by Apple.
What to watch out for in this type of case
This is not advice on what to do with your money, but a description of the mechanics that recur in similar cases:
- The seed phrase is everything. A legitimate wallet will never require you to enter your seed phrase into a random app for "recovery" or "verification." Whoever holds the seed phrase holds the funds.
- An official distribution channel is not the same as security. Based on this case, an app's presence in the App Store does not automatically guarantee it is the genuine app of the given project.
- Imitations of known brands. Fake apps often copy the name, icon, and description of a well-known project. According to CryptoSlate, Sparrow is a repeated target of this.
Why we are following this
The heart of the dispute is the responsibility of an app store operator for damages that occur through its platform. The outcome could indicate to what extent a platform can be legally blamed for fraudulent apps that pass its review. That is measurable: the court will either grant the lawsuit, dismiss it, or the parties will settle. We will return to this.