Just saw this wild story—musician G. Love lost his entire retirement fund because of a fake Ledger app on the Mac App Store. Over 50 people got hit with this scam between April 7-13, losing more than $9.5 million in Bitcoin, Solana, XRP and other assets. The fake app looked legit enough that people didn't even realize until it was too late.

G. Love himself posted about it on X, saying he accidentally downloaded the malicious Ledger Live app when setting up his new computer and lost 5.92 BTC—worth around $449K at current prices. That's his retirement gone in an instant. The blockchain analyst ZachXBT traced the stolen funds to a mixing service using multiple deposit addresses on a major CEX, but apparently the exchange froze the suspicious account after being notified.

What gets me is how easy this attack vector is. Fake apps, fake websites, fake emails—these are literally the most common ways people lose their crypto. Ledger even has a whole page dedicated to phishing campaigns warning about this exact stuff, but the fake app still made it past Apple's review process. Makes you wonder how many more are still out there.