the wallet you downloaded might have generated a week bitcoin address with reused r values. u can see more about it here https://now.avg.com/android-bitcoin-vulnerability-explained/  u should use only official and updated  software