Observed arrival · 2026-08-28
ComeCome, the takeaway app accused of emptying crypto wallets
Credibility concern recorded. The source reference remains available for verification and correction.
A Chinese-language public investigation alleges that a Dubai-focused food-delivery app concealed malware capable of accessing cryptocurrency wallets and transferring funds.
Field notes
The investigation combines a first-person loss report with app-package analysis and blockchain tracing rather than presenting a general security warning. It identifies version 2.9.3, a hidden component named DKStatistics, a reported receiving address that took in about 1.3 million USDT, and a later transfer of roughly 523 ETH into Tornado Cash. The page says version 2.9.5 was released on August 27 but leaves its cleanup status unverified.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue