Launching a mobile app should be a routine milestone for any crypto analytics platform, but for DefiLlama, it turned into a months-long standoff with Apple’s App Store. The DefiLlama app delay stemmed directly from a wave of phishing apps that copied the platform’s name and branding, according to the company’s pseudonymous founder, 0xngmi, who explained the decision in a Saturday post on X.
Key takeaways
- DefiLlama held off releasing its official mobile app for months while fake, phishing versions circulated on Apple’s App Store.
- Founder 0xngmi said the team waited until every impersonating app was taken down to avoid users getting scammed.
- Apple removed one malicious app within days once DefiLlama showed proof that it had drained a small crypto wallet.
- Similar scams have hit other crypto brands before, including Rabby wallet and Curve Finance on Apple’s store in 2024.
- A fake Ledger Live app on the Microsoft Store led to $588,000 in losses across 38 transactions back in November 2023.
DefiLlama delays mobile app launch over phishing threats
The short version: DefiLlama pushed back its own product to protect users from copycats pretending to be it. That’s an unusual trade-off for a company eager to ship a new app, and it says a lot about how seriously phishing threats are treated inside crypto right now.
Phishing apps impersonating DefiLlama on Apple Store
DefiLlama, a widely used analytics platform that tracks decentralized finance protocols, spent months trying to get Apple to pull fraudulent apps carrying its name from the App Store. Instead of rushing its own release while those lookalikes were still live, the team chose to wait, worried that confused users might download the wrong app and lose funds to scammers hiding behind DefiLlama’s identity.
Founder’s decision to wait for app removals
0xngmi was blunt about the reasoning behind the DefiLlama app delay. “We waited ’till all the fake apps were taken down before we launched ours to avoid any user getting scammed,” the founder wrote. That single sentence captures the core tension crypto companies face: launch fast and risk brand confusion, or launch late and keep users safer.
Apple’s response to phishing app removal requests
Apple’s removal process moved at two very different speeds — slow when DefiLlama simply flagged the problem, and fast once there was hard proof of harm. That gap says something important about how app store moderation tends to work for smaller crypto brands.
Duration and process of fake app takedown
According to 0xngmi, DefiLlama had tried for months to get one particular malicious app pulled from the store, with limited success despite repeated requests. It was only after the team escalated with concrete evidence that things moved quickly.
Evidence of crypto wallet draining accelerates removal
The turning point came when DefiLlama’s team downloaded the fake app themselves and documented it draining a small crypto wallet in real time. Once that evidence was in Apple’s hands, the company removed the app “in days,” 0xngmi said. Cointelegraph has reached out to Apple for comment on the matter.
Why this matters: the episode shows that platform moderation for crypto-related apps often reacts to demonstrated financial harm rather than to reports of impersonation alone. For a sector where a single drained wallet can mean a total loss for that user, waiting for proof before acting leaves a window of risk open.
Broader context of crypto app phishing incidents on digital stores
DefiLlama’s experience is not an isolated case. Phishing apps on Apple Store targeting crypto brands have a track record, and the financial damage from similar scams on other platforms has already run into the hundreds of thousands of dollars.
Previous impersonations on Apple Store
Fake apps mimicking well-known crypto products have shown up on Apple’s platform before. In 2024, both Rabby wallet and Curve Finance were impersonated by fraudulent listings designed to look like the real thing, part of a pattern where DefiLlama fake apps and similar copies exploit brand trust to trick users into handing over access to their funds.
Notable theft from fake Ledger Live app on Microsoft Store
App store phishing is not limited to Apple’s ecosystem, either. In November 2023, a fake Ledger Live app hosted on the Microsoft Store led to the theft of $588,000 across 38 separate transactions, according to prior reporting. That case remains one of the clearer examples of how much crypto wallet phishing through official-looking apps can cost victims once it slips past a platform’s review process.
Taken together, these incidents point to a recurring weak spot in how app stores vet financial software claiming to represent recognizable crypto brands. For a company like DefiLlama, the safer, if slower, path was to keep its legitimate app off the shelf until the fakes were gone — a decision that trades short-term visibility for long-term trust with its user base.
FAQ
Why did DefiLlama delay its mobile app launch?
DefiLlama delayed the launch to wait until all phishing apps impersonating it on Apple Store were removed, a step the team took to avoid users getting scammed.
How did Apple respond to the reports of fake DefiLlama apps?
Apple removed one malicious fake app within days after DefiLlama provided evidence that the app had drained a small crypto wallet.
Have other crypto apps faced similar phishing impersonations on app stores?
Yes. Fake apps impersonating Rabby wallet and Curve Finance appeared on Apple’s App Store in 2024, and a fake Ledger Live app caused $588,000 in losses on the Microsoft Store in November 2023.
Article produced with the assistance of artificial intelligence and reviewed by the editorial team.
Be the first to comment