Is D'CENT safe? What its own terms say
Is D'CENT safe to use for casino deposits?
D'CENT's terms disclaim custody and access to your keys, so by their account only you can sign a deposit. Its terms name no gambling rule (store.dcentwallet.com, read 2026-10-07), which is an absence, not a permission. Contracting party: IoTrust Co., Ltd. 5 points are not verified. 1 primary-source incident is recorded. Liability: excluded for all loss.
Documents last checked Reviewed by CryptoGuardz Register Desk, editorial desk
Disclosure: CryptoGuardz has no commercial relationship with D'CENT, earns nothing if you install it, and has not contacted the company or given it notice of this entry. Every statement below is either a verbatim quote from a document D'CENT publishes or a statement about a public record, and both carry the date they were read. Corrections go to the corrections page.
1. What this means for you
Consequences first, in the conditional, each one produced by a clause in a document D'CENT publishes itself. Every line links to that clause, quoted in full and dated. None of them is a claim that D'CENT can move your coins on chain: the terms disclaim that power and this register takes them at their word on it.
- Your access to the app can be withdrawn if D'CENT decides to withdraw it The suspension clause enumerates grounds, and one of them is the expiry of a contract between D'CENT and a technology partner, which is nothing you control.
- You are contracting with someone you cannot name if you use the swap, the on-ramp or the staking inside the app 3 sub-service clauses are recorded across 3 kinds of service, and most of the counterparties are identified in the terms only as a third party.
2. What this entry records, and what it does not
This register publishes no number for a wallet. The payout score on the casino register has five defined components and a published arithmetic; no equivalent instrument exists here. What follows is a field-by-field account of what was read, where and when.
| Binding terms | Read in full5 clauses captured verbatim across 5 topics, retrieved 2026-10-07 |
|---|---|
| Contracting entity | IoTrust Co., Ltd.Republic of Korea. The terms give the address 747, Seolleung-ro, Gangnam-gu, Seoul, 06056, Korea, select Korean law and send disputes to the Korean courts. |
| Custody position in the terms | Disclaims custody and disclaims access to key materialAsserted from the terms, which state the wallet does not store private keys on company servers and the service provider cannot access or store recovery words, PINs or biometric data. The September 2026 incident does not contradict the clause on the evidence published so far: D'CENT has not disclosed the cause. |
| Sub-services | 3 clauses recordedFiat on-ramp · Swap · Staking. A count of recorded clauses, not of distinct companies. |
| Code audit | Not measuredNo security audit, source review or reproducible-build check has been carried out or read by this register. A wallet's safety is largely decided there, and nothing on this page speaks to it. |
| First-party test | Not measuredNo transaction has been signed, no swap executed and no recovery flow run through this product by this register. |
| Default node provider | Not disclosedNo RPC or node provider is named in any primary document retrieved. |
3. What we could not verify
Every entry carries this section. The gaps are published because a reader deserves the limits of the check as well as its results.
- The technical cause of the September 2026 App Wallet incident, the number of wallets affected and the amount lost. D'CENT has withheld the cause; press figures were not confirmed against a primary source.
- Whether any compensation will be offered for the September 2026 incident. None is stated in D'CENT's report or FAQ.
- A 2019 D'CENT firmware vulnerability reported in the press. No D'CENT or IoTrust primary source was retrieved; not recorded.
- TON, BNB Chain, Base and Polygon support. The swap supported-networks guide redirected and was not read.
- Whether any sanctions or geographic restriction clause exists in the terms. None was found.
4. Who you are contracting with
The binding document names a company and states where it is registered or which law governs. The detail and the clause are below.
| Named counterparty | IoTrust Co., Ltd.source · retrieved 2026-10-07 |
|---|---|
| Jurisdiction | Republic of Korea. The terms give the address 747, Seolleung-ro, Gangnam-gu, Seoul, 06056, Korea, select Korean law and send disputes to the Korean courts. |
| Relationships disclosed | The terms name eleven third-party service providers: Moonpay, Simplex, Topper, Changelly, ChangeNow, 1inch, Exolix, Sushi Swap, Swap scanner, Butter Swap and Doppler Finance. The privacy policy change notice of May 2026 names Google Analytics, Amplitude and Pushwoosh as overseas recipients of app data. |
747, Seolleung-ro, Gangnam-gu, Seoul, 06056, Koreastore.dcentwallet.com
5. The custody claim, and what the binding document says
What D'CENT says in the place a user reads, against what it says in the place that binds a user.
Your keys and recovery always stay in your hands.dcentwallet.com · 2026-10-07
The DCENT Wallet is a self-custody, non-custodial wallet, allowing users to independently manage their cryptographic asset private keys.store.dcentwallet.com · 2026-10-07
generate and store your private key inside a secure chipdcentwallet.com
The wallet does not store users' private keys on the company's servers, and the DCENT Wallet does not access the user's private key.store.dcentwallet.com
D'CENT sells biometric and card hardware wallets and offers a software App Wallet mode in the same app. In hardware mode the device holds the keys; in App Wallet mode the phone does. The binding document for both is the D'CENT App Terms and Conditions. The September 2026 incident recorded below concerned keys generated or used in the App Wallet, not keys generated on the hardware device.
6. Recovery, and where the terms and the marketing differ
| Cloud or hosted backup offered | no |
|---|---|
| What is stored | Nothing by D'CENT, by the terms. The user keeps the recovery phrase. |
| Where | On the hardware device's secure chip or, in App Wallet mode, on the phone, and in the user's own record of the recovery phrase. |
| Changes the custody position | no |
The service provider cannot access or store passwords, recovery words, PIN codes, biometric data, or any other credentials associated with the user's service usage.store.dcentwallet.com
No difference found on custody. The marketing states keys never leave the secure chip, which describes hardware mode only; the same app offers a software App Wallet mode whose keys are on the phone, and the September 2026 incident concerned that mode. The marketing does not distinguish the two.
7. The app is not the wallet
3 clauses, each one a place where the product routes a user to a counterparty the user never contracts with by name, under terms the user never opens. The count is of recorded clauses and not of distinct companies: two entries can name the same counterparty and each still be a separate thing the terms permit.
Moonpay, Simplex, Topper, Changelly, ChangeNow, 1inch, Exolix, Sushi Swap, Swap scanner, Butter Swap, Doppler Financestore.dcentwallet.com
Moonpay, Simplex, Topper, Changelly, ChangeNow, 1inch, Exolix, Sushi Swap, Swap scanner, Butter Swap, Doppler Financestore.dcentwallet.com
Moonpay, Simplex, Topper, Changelly, ChangeNow, 1inch, Exolix, Sushi Swap, Swap scanner, Butter Swap, Doppler Financestore.dcentwallet.com
8. Withdrawing your access to the interface
Your keys are yours. The software you reach them through is licensed, and the licence can be withdrawn. 1 clauses are recorded on this point.
The service provider reserves the right to temporarily or indefinitely alter, update, or discontinue the service for various operations, including but not limited to firmware and software updates, maintenance, server modifications, bug fixes, and other tasks.store.dcentwallet.com
9. Who can block an address
D'CENT claims no power to block an address in the documents read. No clause in the documents read discloses that another party in the stack can freeze or blacklist an address either. That is an absence of disclosure, not a guarantee that no such party exists.
In the event that the user encounters issues with the cryptographic assets they hold or if transactions on the cryptographic asset network are interrupted due to government policies or other equivalent reasons, the service provider may suspend the sending and receiving services for the cryptographic assets available to users.store.dcentwallet.com
A power to suspend send and receive functions in the app for an asset, triggered by asset issues or government policy. It is not a power over a named address, and since keys are on the device or phone it does not stop the user signing elsewhere.
10. What the terms say about gambling
Position recorded: not disclosed. No clause naming gambling, betting, casinos or wagering was found in the documents read. That is an absence in the documents, not a permission, and the general prohibition on unlawful use still applies.
The card side of the same question is on the card register, and the casino side on KYC on withdrawal.
11. Chains it names
Of the eight chains this register filters on, D'CENT names 4: Bitcoin, Ethereum, Solana, Tron. Not named on the pages read: TON, BNB Chain, Base, Polygon. Bitcoin, Ethereum and Solana are named in the supported-assets section of the D'CENT shop's compatibility page. TRON is named only in D'CENT's own incident report as a chain on which App Wallet keys were affected, which establishes that the app supports it. TON, BNB Chain, Base and Polygon were not confirmed; the compatibility page claims 100+ mainnets without listing them in the text retrieved.
BTC Bitcoinstore.dcentwallet.com
ETH Ethereumstore.dcentwallet.com
SOL Solanastore.dcentwallet.com
Bitcoin, Ethereum, XRPL, TRON, EVM-based chains, and others.store.dcentwallet.com
12. Liability, amendment, arbitration and where you can use it
The liability clause excludes liability for all loss rather than capping it at a figure. It is the clause that decides what the rest of the document is worth.
To the extent permitted by law, the service provider is not liable for any direct, indirect, incidental, special, consequential, or exemplary damages, including but not limited to property damage, data, and other intangible asset lossstore.dcentwallet.com
Applies to enumerated circumstances including service interruptions, unauthorised access and network failures. No monetary cap in the current version.
when amending the terms and conditions to the detriment of users, they provide notice at least 30 days before the effective date and send individual notices to users via E-Mailstore.dcentwallet.com
One of the few amendment clauses in the register that commits to advance notice: seven days generally, thirty days and individual email for changes to the user's detriment.
What the provider states it processes, and who it passes it to. Recorded because a wallet that never touches a key can still see every address you hold.
device session identifiers, IP addresses, clicks, actions (e.g., application launch, transaction function use, page views), attributes (e.g., type, version, language, and region recorded on the operating system), timestamps, identifiers used by partners to distinguish users (if using the service), cryptocurrency account lists, wallet addresses, user settings information (language, currency, wallet mode).store.dcentwallet.com
Data collected by the app per the privacy policy. Wallet addresses are collected, and a May 2026 change adds transfer to Google Analytics, Amplitude and Pushwoosh in the United States.
13. Public record
Matters of public record, taken from primary sources and stated with them. Both of the records below were disclosed by the provider itself or entered in a public vulnerability register, rather than found in the press.
D'CENT reported unauthorised asset transfers from App Wallet (software wallet) addresses on Android and iOS, where the signing took place in an app version earlier than 8.1.0 (released 5 November 2025). Affected: App Wallet users and hardware wallet users who had restored the same recovery phrase into the App Wallet. Chains named include Bitcoin, Ethereum, XRPL and TRON. D'CENT withheld the technical cause, told users to create a wallet with a new recovery phrase and move all assets, and warned that reusing an existing phrase may regenerate the same or a related key. D'CENT's report gives no count of wallets or amount lost and makes no compensation statement.
Reusing an existing recovery phrase may regenerate the same or a related key, so use a new recovery phrase whether on the app or on a hardware wallet.
14. Who should avoid D'CENT
Anyone who needs a named party to be answerable for a loss. The liability position is excludes liability for all loss, and the terms disclaim responsibility for every third-party service the app routes you into.
Related entries
Or read the whole wallet register, the card register, the same method applied to exchanges and to crypto casinos, the clause library at clause watch, or how this register works.
15. Sources
- D'CENT App Terms and Conditions, change notice and text effective 20 May 2026
- D'CENT App Privacy Policy, version history
- D'CENT homepage
- D'CENT supported coins and tokens compatibility list
- D'CENT, Status Report on Unauthorized Asset Transfers in the App Wallet, 17 September 2026
- D'CENT, Frequently Asked Questions on the App Wallet security issue