DefiLlama Postpones Mobile App Launch
DefiLlama, a prominent platform for decentralized finance analytics, has postponed the launch of its mobile application due to issues with fraudulent apps that mimicked its services appearing on Apple’s App Store. This revelation was disclosed by the platform’s pseudonymous founder, 0xngmi, on August 15.
Fraudulent Apps and Security Concerns
According to his statement, despite numerous efforts to report and remove these counterfeit applications based on trademark violations and impersonation claims, Apple did not take action until the team demonstrated the severity of the situation.
In a bold move, the DefiLlama team funded a test wallet and downloaded one of the fake apps, only to witness the funds vanish, an act they promptly reported to Apple.
The app was taken down in days after that.
However, the exact amount drained from the test wallet remains undisclosed.
Impact on Product Launch
This security issue had significant implications for DefiLlama’s product launch, with 0xngmi emphasizing that they opted to delay their app’s release to ensure users would not fall prey to scams stemming from these fake applications. The company’s narrative regarding this timeline has yet to be corroborated by Apple.
Official App Availability
The official DefiLlama app is now available for download on both iOS and Android devices. The App Store refers to it as “DefiLlama: DeFi Tracker,” clearly identifying DefiLlama as the developer and DEFILLAMA LIMITED as the provider.
Apple’s App Review Guidelines
Apple’s App Review guidelines explicitly prohibit the existence of apps that impersonate other services or utilize another developer’s branding without appropriate permissions. Continuous violations may result in a developer’s removal from the Apple Developer Program. Apple has not provided a public response regarding 0xngmi’s claims but has stated in the past that its App Review process scrutinizes apps for security risks, having rejected over 320,000 submissions in 2024 for reasons including mimicry and misleading claims.
Broader Context of Fraudulent Apps
This incident is not isolated. Recent reports from crypto.news highlighted similar occurrences where unauthorized cryptocurrency applications infiltrated Apple’s marketplace. One notable case involved a fraudulent Ledger Live app that stole 5.9 Bitcoin, valued at approximately $420,000, from musician Garrett Dutton in April. Moreover, Apple is currently entangled in a U.S. lawsuit linked to users accusing it of negligence over counterfeit Sparrow Wallet apps that reportedly resulted in losses of $1.835 million in Bitcoin; these allegations have yet to be substantiated in court.
Additionally, users have experienced losses due to a fraudulent Phantom Wallet app that also found its way onto the App Store before being removed following user complaints.
Advice for Users
Now, with DefiLlama’s legitimate app operational, users are advised to access it through the official DefiLlama website and verify the developer and provider details to ensure safety. Despite these precautions, the founder has not yet published specifics regarding the amount or the attacker addresses involved in the test wallet incident, which would be critical for an independent analysis of the scheme. Hence, the safest approach for consumers is to rely on DefiLlama’s official communications rather than informal searches in the App Store to avoid potential scams.
