View source for Toast Wallet Plus Malicious IPhone App

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/toastwalletplusmaliciousiphoneapp.php}}
{{Unattributed Sources}}

[[File:Toastwallet.jpg|thumb|Toast Wallet]]A legitimate "Toast" wallet, created in 2017 by StarStone Unlimited in New Zealand, was designed to be simple and safe for storing Ripple (XRP). However, a deceptive app, "Toast Plus," appeared on the Apple App Store, with a similar name and logo. Many users downloaded Toast Plus, thinking it was related to the genuine Toast wallet. Unfortunately, it was a phishing program created to steal cryptocurrency by tricking users into revealing their account information. Many users lost cryptocurrency stored in this deceptive app and took various steps to investigate the theft. Apple faced a class action lawsuit for hosting this fraudulent app but argued that it was protected by Section 230 of the Communications Decency Act.

This is a global/international case not involving a specific country.<ref name="redditold-12063" /><ref name="redditold-12064" /><ref name="courthousenews-12065" /><ref name="courthousenews-12066" /><ref name="redditold-12067" /><ref name="redditold-12068" /><ref name="redditold-12069" /><ref name="redditold-12070" /><ref name="bithomp-12071" /><ref name="coinmarketcap-2237" /><ref name="cryptonewsflash-12072" /><ref name="xrpchat-12073" /><ref name="cryptonews-12074" /><ref name="apkcombo-12075" /><ref name="ycombinatornews-12076" /><ref name="bloomberglaw-12077" /><ref name="bloomberglawnews-12078" /><ref name="redditold-12079" /><ref name="appsapparchive-12080" /><ref name="redditold-12081" /><ref name="redditold-12082" /><ref name="redditold-12083" /><ref name="redditold-12084" /><ref name="redditold-12085" /><ref name="redditold-12086" /><ref name="redditold-12087" /><ref name="apptopia-12088" /><ref name="coindoo-12089" /><ref name="appadvice-12090" /><ref name="coinsutra-12091" /><ref name="cryptobriefing-12092" /><ref name="redditold-12093" /><ref name="redditold-12094" /><ref name="xrpscan-12095" /><ref name="xrpscan-12096" /><ref name="xrpscan-12097" /><ref name="xrpscan-12098" /><ref name="redditold-12099" /><ref name="redditold-12100" /><ref name="redditoldarchive-12101" /><ref name="redditold-12102" /><ref name="xrpscan-12103" /><ref name="redditold-12104" />

== About Toast Wallet ==
"Toast is a Ripple (XRP) non-custodial wallet that was created in 2017 by a company named StarStone Unlimited, based in New Zealand, Dunedin.

The StarStone corporation was also established in 2017 by Richard Holland, and it seems that the wallet is their only product launched so far. They claim that the wallet was created to be “simple enough for your grandma but safe enough for a Swiss banker.”"

"Toast Plus - XRP Wallet Easy and Secure XRP Storage"

"Toast Plus is XRP wallet that is simple and safe to use. It works with a PIN and a Hierarchical Deterministic (HD) passphrase for extra protection."

"Toast Plus is a product of Peninsula Software and has not been authorized, endorsed, sponsored or otherwise approved by Ripple or its affiliates."

"[T]he App Store is more than just a storefront — it’s an innovative destination focused on bringing you amazing experiences. And a big part of those experiences is ensuring that the apps we offer are held to the highest standards for privacy, security, and content. Because we offer nearly two million apps — and we want you to feel good about using every single one of them."

"I read a lot of good things about the Toast wallet here, but the comments were mostly from 1-2 years ago. I downloaded the “Toast Plus” app on Apple store assuming this was the same one... it even showed up high in search when I searched XRP Wallet (I know, not smart at all) and it had 35 reviews."

"Plaintiff believed that Toast Plus was a version of Toast Wallet, a wellknown cryptocurrency wallet, as the names were similar and the logo used for the application in the App Store was the same or nearly identical."

"Josue Armenta scammed using the app [T]oast [P]lus." "He's in Mexico."

"On or about January 2, 2018, Plaintiff caused approximately 474 Ripple (“XRP”) cryptocurrency coins to be transferred from the Bittrex cryptocurrency exchange to a secure cryptocurrency wallet, called Rippex." "Rippex shut down February 2nd, 2018; however, Plaintiff could still access her coins from any secure wallet.  Plaintiff thereafter linked her private XRP key, or a seed phrase, into Toast Plus in March of 2021." "As Plaintiff intended to hold the XRP as an investment and not to actively trade it, she did not check the Toast Wallet Plus application after entering her seed phrase into it." "In August of 2021, Plaintiff checked her account on Toast Plus, and discovered that not only did she have no XRP in the Wallet, her account was "deleted" on March 3, 2021."

"Plaintiff thereupon began investigating the matter, and discovered that Toast Plus was not in fact a version of the legitimate Toast Wallet application, but was instead a “spoofing” or “phishing” program created for the sole purpose of stealing cryptocurrency, by obtaining consumers' cryptocurrency account information and thereafter routing the same to the hackers' personal accounts."

"The application Toast Plus's sole purpose is to entice consumers to divulge their cryptocurrency account information, by mimicking an established cryptocurrency wallet in name, mark, and design, thereby allowing hackers to steal that cryptocurrency."

"Plaintiff took the following steps to investigate the theft of her property: contacting or attempting to contact Toast Plus; investigating Toast Plus through online resources; contacting Apple; contacting the Federal Trade Commission and the Federal Bureau of Investigations; and identifying co-conspirators involved in the fraudulent acts through online research."

"Plaintiff downloaded the application known as Toast Plus from the Apple App Store on or about March of 2020 onto her iPhone."

"Pursuant to Federal Rule of Civil Procedure 23(a)(1), the members of the Classes are so numerous and geographically dispersed that individual joinder of all Class members is impracticable. While Plaintiff is informed and believes that there are at least hundreds or thousands of members of the Class, the precise number of Class members in Maryland and Nationwide is unknown to Plaintiff, but may be ascertained from Defendant's books and records. Class members may effectively and efficiently be notified of the pendency of this action by recognized, Court-approved dissemination methods, which may include U.S. mail, electronic mail, Internet postings, and/or publication."

"Plaintiff personally has suffered more than $5,000 in direct consequential economic damages as a result of Defendant's acts and omissions, in that she lost cryptocurrency of value, and has spent her time investigating the source and method of the fraud, determining who was responsible, contacting law enforcement agencies, and communicating with Defendant to attempt to investigate and remediate the fraud, to no avail, and conferring with legal counsel on the fraud and any remedies."

"Just weeks ago, Apple announced the settlement of another class action suit filed by US-based software developers, promising better terms for the people who make much of the software that iPhone users run."

"From the beginning, the App Store has been an economic miracle; it is the safest and most trusted place for users to get apps, and an incredible business opportunity for developers to innovate, thrive and grow," the company said in a press release announcing the changes, which are pending approval by a judge.

"Apple Inc. escaped a proposed class action brought over a fraudulent cryptocurrency wallet app that was available for download on its App Store, after a federal judge in San Francisco ruled the tech company’s platform is shielded by Section 230 of the Communications Decency Act.

Hadona Diep sued Apple in Maryland federal court in September, accusing the company of hosting “Toast Plus,” a fraudulent mobile application for a crypto wallet that had a similar name and similar or identical logo to its legitimate counterpart. When Diep checked its status, she found that the lookalike app had deleted her account"

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Toast Wallet Plus Malicious IPhone App
!Date
!Event
!Description
|-
|January 29th, 2021 3:43:25 PM MST
|RevNimshi Reddit Post
|Reddit user RevNimshi attempts to warn about the wallet but this post gets no reaction and appears to be deleted.
|-
|January 29th, 2021 3:45:32 PM MST
|Reddit Post
|A Reddit thread is started with a warning about the Toast Plus wallet.
|-
|January 29th, 2021 3:45:32 PM MST
|RevNimshi Reddit Post
|A Reddit thread is started with a warning about the Toast Plus wallet which reports a loss of 19,000 XRP.
|-
|January 29th, 2021 4:38:29 PM MST
|cryptowalk Loss Report
|Reddit user cryptowalk reports being involved in the loss.
|-
|February 18th, 2021 11:12:31 AM MST
|IngarethaSybiil Comment
|The user IngarethaSybiil reports that their funds were taken from the same application "last week".
|-
|February 24th, 2021 9:24:10 PM MST
|CryOptimusPrime Wallet Emptied
|The blockchain transaction referenced by CryOptimusPrime for 2,294.940000 XRP.
|-
|February 24th, 2021 9:40:00 PM MST
|CryOptimusPrime Wallet Deleted
|A blockchain transaction deletes the wallet of CryOptimusPrime in order to retrieve an additional 14.993850 XRP.
|-
|February 27th, 2021 7:58:53 PM MST
|CryOptimusPrime Comment
|The user CryOptimusPrime reports losing 2294 XRP on February 25th, 2021 in a comment on Reddit.
|-
|February 28th, 2021 9:23:18 AM MST
|bobsaget_26 Investigation
|The Reddit user bobsaget_26 reports that they "know exactly who the Dev is" and "have gathered up a list of places to report your theft to and how to stop this guy from stealing from others".
|-
|March 3rd, 2021
|Hadona Diep XRP Theft
|Hadona Diep from Maryland reports that their XRP account was emptied and deleted on this date, prompting the lawsuit.
|-
|March 4th, 2021
|alritedi Reddit Comment
|The Reddit user alritedi reports that their funds were stolen on this date.
|-
|March 10th, 2021 10:03:53 AM MST
|meatloafsmoobs Investigation
|meatloafsmoobs comments to report that they work for one of the cryptocurrency exchanges and believe that the individual responsible may have an account at their exchange. They aren't willing to disclose which exchange they work for.
|-
|April 11th, 2021 8:32:46 PM MDT
|alritedi Reddit Comment
|The Reddit user alritedi reports realizing that they lost their funds based on seeing the Reddit post. It "definitely gave a perspective that [they] could use [their] hardware wallets a little more".
|-
|April 13th, 2021 11:07:16 PM MDT
|GEGpilot Loss Reported
|GEGpilot reports that the Toast Plus wallet "cleaned [them] out" and describes their situation as "so depressing".
|-
|April 20th, 2021 11:49:24 AM MDT
|StatisticianNo5316 Reddit Comment
|StatisticianNo5316 reports that they were just robbed by the same application. They also report that the scammer has now adopted the nickname "bobsaget26".
|-
|April 20th, 2021 12:49:12 PM MDT
|VapoRubUser Reddit Comment
|VapoRubUser reports having their funds stolen and sent to the blockchain address r3XGwhMrnfWf72vm3Yh5H23PiLoDKxcXc.
|-
|May 27th, 2021 1:21:11 PM MDT
|Last Reddit Comment
|The latest Reddit comment from a user who lost their funds.
|-
|May 27th, 2021 1:21:11 PM MDT
|retrorick77 Reddit Comment
|Reddit user retrorick77 reports losing "all [their] xrp [a] few days ago on toast wallet plus". "Is there anything to be done?"
|-
|September 20th, 2021 5:48:49 AM MDT
|Crypto News Flash Article
|Crypto News Flash publishes an article about the lawsuit against Apple.
|-
|September 16th, 2023
|Hadona Diep Apple Lawsuit
|Hadona Diep from Maryland files a lawsuit against Apple for hosting the fraudulent Toast Plus application.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost has been estimated at $500,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="redditold-12063">[https://old.reddit.com/r/ledgerwallet/comments/me1j5n/over_40k_of_cryptocurrency_stolen/ Over $40k of CryptoCurrency Stolen : ledgerwallet] (Aug 7, 2022)</ref>

<ref name="redditold-12064">[https://old.reddit.com/r/ledgerwallet/comments/me1j5n/over_40k_of_cryptocurrency_stolen/hqo8aat/ JDubyaEsq comments on Over $40k of CryptoCurrency Stolen] (Aug 7, 2022)</ref>

<ref name="courthousenews-12065">[https://www.courthousenews.com/apple-faces-class-action-over-app-that-led-to-cryptocurrency-theft/ https://www.courthousenews.com/apple-faces-class-action-over-app-that-led-to-cryptocurrency-theft/] (Dec 23, 2022)</ref>

<ref name="courthousenews-12066">[https://www.courthousenews.com/wp-content/uploads/2021/09/apple-suit.pdf https://www.courthousenews.com/wp-content/uploads/2021/09/apple-suit.pdf] (Dec 23, 2022)</ref>

<ref name="redditold-12067">[https://old.reddit.com/r/XRP/comments/l86o5z/beware_toast_plus_wallet_is_compromised/ Beware: Toast Plus Wallet is compromised : XRP] (Dec 23, 2022)</ref>

<ref name="redditold-12068">[https://old.reddit.com/r/ToastWallet/comments/msxaha/beware_when_importing_xrp_from_old_toast_wallet/ BEWARE WHEN IMPORTING XRP FROM OLD TOAST WALLET : ToastWallet] (Dec 24, 2022)</ref>

<ref name="redditold-12069">[https://old.reddit.com/r/ToastWallet/comments/mozm8w/toast_wallet_scam/ TOAST WALLET SCAM : ToastWallet] (Dec 24, 2022)</ref>

<ref name="redditold-12070">[https://old.reddit.com/r/XRP/comments/pht2s0/toast_wallet/ Toast wallet : XRP] (Dec 24, 2022)</ref>

<ref name="bithomp-12071">[https://bithomp.com/explorer/rnmmG1QSVjZiTV5Toy32dsH8ZGDQSW6DZF robertsaget rnmmG1QSVjZiTV5Toy32dsH8ZGDQSW6DZF] (Dec 26, 2022)</ref>

<ref name="coinmarketcap-2237">[https://coinmarketcap.com/currencies/xrp/historical-data/ XRP price today, XRP live marketcap, chart, and info | CoinMarketCap] (Aug 7, 2021)</ref>

<ref name="cryptonewsflash-12072">[https://www.crypto-news-flash.com/xrp-investors-sue-apple-for-knowingly-allowing-malicious-crypto-wallet-on-app-store/ XRP holders sue Apple for “knowingly allowing” malicious wallet on App Store] (Oct 18, 2023)</ref>

<ref name="xrpchat-12073">[https://www.xrpchat.com/topic/36905-toast-wallet/ Toast wallet - Problem Solving - XRP CHAT] (Oct 18, 2023)</ref>

<ref name="cryptonews-12074">[https://cryptonews.net/news/legal/1899657/ Apple faces class-action lawsuit over an app that steals crypto] (Oct 18, 2023)</ref>

<ref name="apkcombo-12075">[https://apkcombo.com/toast-plus-easy-and-secure-xrp-wallet/co.peninsulasoftware.toastwallet/ https://apkcombo.com/toast-plus-easy-and-secure-xrp-wallet/co.peninsulasoftware.toastwallet/] (Oct 18, 2023)</ref>

<ref name="ycombinatornews-12076">[https://news.ycombinator.com/item?id=26048714 14,609.911164 XRP stolen Toast Plus on Apple app store | Hacker News] (Oct 18, 2023)</ref>

<ref name="bloomberglaw-12077">[https://www.bloomberglaw.com/public/desktop/document/DiepvAppleIncNo21cv10063PJH2022BL310686NDCalSept022022CourtOpinio?doc_id=XMV3UMVG000N https://www.bloomberglaw.com/public/desktop/document/DiepvAppleIncNo21cv10063PJH2022BL310686NDCalSept022022CourtOpinio?doc_id=XMV3UMVG000N] (Oct 18, 2023)</ref>

<ref name="bloomberglawnews-12078">[https://news.bloomberglaw.com/privacy-and-data-security/apple-escapes-fake-toast-plus-cryptocurrency-wallet-app-suit Apple Escapes Fake ‘Toast Plus’ Cryptocurrency Wallet App Suit] (Oct 18, 2023)</ref>

<ref name="redditold-12079">[https://old.reddit.com/r/ToastWallet/comments/msxaha/comment/gvbpy6i/ StatisticianNo5316 comments on BEWARE WHEN IMPORTING XRP FROM OLD TOAST WALLET] (Oct 18, 2023)</ref>

<ref name="appsapparchive-12080">[https://web.archive.org/web/20210130004641/https://apps.apple.com/us/app/droplet-xrp-spark-wallet/id1526070300 ‎Droplet - XRP & Spark Wallet on the App Store] (Oct 18, 2023)</ref>

<ref name="redditold-12081">[https://old.reddit.com/r/Ripple/comments/m4k84o/comment/gu7os6g/ alritedi comments on Please Help Me: Account Deleted on XUMM Wallet.] (Oct 18, 2023)</ref>

<ref name="redditold-12082">[https://old.reddit.com/r/XRP/comments/l86o5z/comment/gqgrgwl/ Beware: Toast Plus Wallet is compromised : XRP] (Oct 18, 2023)</ref>

<ref name="redditold-12083">[https://old.reddit.com/r/XRP/comments/l86o5z/comment/glc1ops/ cryptowalk comments on Beware: Toast Plus Wallet is compromised] (Oct 18, 2023)</ref>

<ref name="redditold-12084">[https://old.reddit.com/r/XRP/comments/l86o5z/comment/gp6rr1q/ bobsaget_26 comments on Beware: Toast Plus Wallet is compromised] (Oct 18, 2023)</ref>

<ref name="redditold-12085">[https://old.reddit.com/r/XRP/comments/l86o5z/comment/gugfj1q/ GEGpilot comments on Beware: Toast Plus Wallet is compromised] (Oct 18, 2023)</ref>

<ref name="redditold-12086">[https://old.reddit.com/r/ToastWallet/comments/msxaha/comment/gv86xwt/ StatisticianNo5316 comments on BEWARE WHEN IMPORTING XRP FROM OLD TOAST WALLET] (Oct 18, 2023)</ref>

<ref name="redditold-12087">[https://old.reddit.com/r/XRP/comments/l86o5z/comment/gzo7fdm/ retrorick77 comments on Beware: Toast Plus Wallet is compromised] (Oct 18, 2023)</ref>

<ref name="apptopia-12088">[https://apptopia.com/ios/app/1545483084/about About: Toast Plus - XRP Wallet (iOS App Store version) |  | Apptopia] (Oct 18, 2023)</ref>

<ref name="coindoo-12089">[https://coindoo.com/toast-wallet-review-is-this-the-best-ripple-wallet/ Toast Wallet Review | Features, Security, Pros and Cons - Coindoo] (Oct 18, 2023)</ref>

<ref name="appadvice-12090">[https://appadvice.com/app/toast-plus-xrp-wallet/1545483084 https://appadvice.com/app/toast-plus-xrp-wallet/1545483084] (Oct 18, 2023)</ref>

<ref name="coinsutra-12091">[https://coinsutra.com/best-ripple-xrp-wallets/ Ripple (XRP) Wallet - Best Wallets For Ripple] (Oct 18, 2023)</ref>

<ref name="cryptobriefing-12092">[https://cryptobriefing.com/how-to-use-xrp-ripples-token-for-beginners/ https://cryptobriefing.com/how-to-use-xrp-ripples-token-for-beginners/] (Oct 18, 2023)</ref>

<ref name="redditold-12093">[https://old.reddit.com/r/XRP/comments/l86o5z/comment/gnwuaa2/ IngarethaSybiil comments on Beware: Toast Plus Wallet is compromised] (Dec 24, 2022)</ref>

<ref name="redditold-12094">[https://old.reddit.com/r/XRP/comments/l86o5z/comment/gp440my/ CryOptimusPrime comments on Beware: Toast Plus Wallet is compromised] (Dec 24, 2022)</ref>

<ref name="xrpscan-12095">[https://xrpscan.com/account/rG1fkzfCSP1ckccqRuEVbSyictBekxhbW5 XRP Ledger Explorer - XRPSCAN] (Oct 18, 2023)</ref>

<ref name="xrpscan-12096">[https://xrpscan.com/tx/8945D55885FA2396477C1D126E2594C6242E8E731BB6C4EA1C5DCE787742335B XRP Ledger Explorer - XRPSCAN] (Oct 18, 2023)</ref>

<ref name="xrpscan-12097">[https://xrpscan.com/tx/F6F58C03F744867357A6A65E10BBCECA8B4F6E23128DDA1F63A07EBCA6875058 XRP Ledger Explorer - XRPSCAN] (Oct 18, 2023)</ref>

<ref name="xrpscan-12098">[https://xrpscan.com/account/r3Ke7BFJGeB7gBZT2r4fpquFXLQmtMWb6V XRP Ledger Explorer - XRPSCAN] (Oct 18, 2023)</ref>

<ref name="redditold-12099">[https://old.reddit.com/r/Ripple/comments/m4k84o/please_help_me_account_deleted_on_xumm_wallet/gu7os6g/ alritedi comments on Please Help Me: Account Deleted on XUMM Wallet.] (Oct 17, 2023)</ref>

<ref name="redditold-12100">[https://old.reddit.com/r/Ripple/comments/m4k84o/please_help_me_account_deleted_on_xumm_wallet/gu8vni2/ alritedi comments on Please Help Me: Account Deleted on XUMM Wallet.] (Oct 17, 2023)</ref>

<ref name="redditoldarchive-12101">[https://web.archive.org/web/20210310170537/https://old.reddit.com/r/XRP/comments/l86o5z/beware_toast_plus_wallet_is_compromised/gqgrgwl/ meatloafsmoobs comments on Beware: Toast Plus Wallet is compromised] (Oct 20, 2023)</ref>

<ref name="redditold-12102">[https://old.reddit.com/r/ToastWallet/comments/msxaha/beware_when_importing_xrp_from_old_toast_wallet/gv8fs9k/ VapoRubUser comments on BEWARE WHEN IMPORTING XRP FROM OLD TOAST WALLET] (Oct 20, 2023)</ref>

<ref name="xrpscan-12103">[https://xrpscan.com/account/r3XGwhMrnfWf72vm3Yh5H23PiLoDKxcXc XRP Ledger Explorer - XRPSCAN] (Oct 20, 2023)</ref>

<ref name="redditold-12104">[https://old.reddit.com/r/XRP/comments/l86o5z/beware_toast_plus_wallet_is_compromised/gzo7fdm/ retrorick77 comments on Beware: Toast Plus Wallet is compromised] (Dec 25, 2022)</ref></references>