Ripple CTO Emeritus David Schwartz has raised a security alarm after receiving a suspicious Android notification that appeared to originate from the SecuX wallet application. Schwartz said he tapped the alert out of curiosity, and it opened the app normally. Only after checking his notification history did he discover a fraudulent message embedded in the alert.
The message claimed: “Your funds may be at risk, critical vulnerability detected in SecuX wallet, verify your wallet immediately,” and included a link to a scam page requesting the user’s 12- or 24-word recovery phrase. Schwartz warned users emphatically: “NEVER DO THAT!” He explained that such phrases allow anyone who obtains them to restore a wallet and take control of its funds.
The warning followed a notice from SecuX on October 16 about emergency maintenance and a major system upgrade intended to enhance security and stability. The company did not disclose the exact nature of the emergency issue. It remains unclear whether the malicious notification was generated by the app itself, a third-party notification service, or another source, and the available information does not independently confirm that SecuX’s app or infrastructure was compromised.
SecuX has since said the app has resumed normal operations, and it urged users not to click suspicious or unverified links, never to share their 24-word recovery phrase, and to be cautious of messages impersonating SecuX Support.
