SecuX continued to face service outages after emergency maintenance began on October 16, despite saying at 15:34 that operations had returned to normal. Multiple users reported on October 17 that they remained unable to access their wallets. The incident escalated when Ripple CTO David Schwartz, also known as JoelKatz, disclosed that the SecuX Android app had pushed a fraudulent notification linking to a phishing page designed to steal users’ 12- or 24-word recovery phrases. SecuX has not explained how the malicious notification was distributed through its official application, whether it was connected to the service outage, or when full restoration will be completed. The company reiterated that it will never ask for recovery phrases and urged users to avoid suspicious links and messages impersonating SecuX Support.