DefiLlama founder 0xngmi says Apple took months to remove a fake wallet-draining app, forcing the team to delay its own iOS launch.
Alpha Score of 56 reflects moderate overall profile with moderate momentum, weak value, strong quality, moderate sentiment.
DefiLlama delayed the public launch of its mobile application while trying to remove apps impersonating the DeFi analytics platform from Apple’s App Store, pseudonymous founder 0xngmi said on Aug. 15.
The team eventually demonstrated that one fake app could drain a funded crypto wallet before Apple removed it, according to his post from that day.
0xngmi said DefiLlama had reported the application for months over trademark and impersonation concerns without securing its removal. The team then funded a small test wallet, downloaded the application and watched the funds disappear. “App was taken down in days after that,” he wrote. The amount drained from the test wallet was not disclosed.
The security problem directly affected DefiLlama’s product rollout. 0xngmi said the company “waited ’till all the fake apps were taken down before we launched ours to avoid any user getting scammed.” That timeline is DefiLlama’s account and has not been independently confirmed by Apple.
The genuine DefiLlama application is now publicly available. DefiLlama’s official page says its mobile product is live on iOS and Android. Apple’s listing identifies the iPhone application as “DefiLlama: DeFi Tracker,” names DefiLlama as the developer and lists DEFILLAMA LIMITED as the provider.
Apple’s App Review guidelines prohibit applications that impersonate other apps or services. The rules also bar developers from using another developer’s icon, brand or product name without permission. Repeated impersonation can lead to removal from the Apple Developer Program.
Apple has not publicly addressed 0xngmi’s specific account in the official materials reviewed for this report. The company has previously said its App Review system evaluates applications for security and safety, and Apple reported rejecting more than 320,000 submissions in 2024 because they copied other apps, constituted spam or otherwise misled users.
The DefiLlama dispute follows other cases where fake cryptocurrency applications reached Apple’s marketplace. A fraudulent Ledger Live application drained 5.9 BTC worth roughly $420,000 from musician Garrett Dutton in April, as crypto.news reported. On-chain researcher ZachXBT traced the stolen Bitcoin to addresses associated with KuCoin.
Apple is also facing a U.S. lawsuit involving three users who allege fake Sparrow Wallet apps caused $1.835 million in Bitcoin losses. Those allegations have not been tested in court. Apple said in that case that it removed impersonating applications and terminated related developer accounts.
A fake Phantom Wallet application also reached Apple’s App Store before being removed after users reported losing funds.
DefiLlama’s official app is now active, and its website provides direct access to the legitimate mobile product. The iOS listing currently shows version 1.0.5 and identifies defillama.com as the developer website, giving users multiple details to verify before installation.
The founder has not disclosed the attacker addresses, amount stolen during DefiLlama’s test or technical analysis of the malicious application. Those details would be needed to independently reconstruct the wallet drain. For users, the clearest verified safeguard is to reach the mobile application through DefiLlama’s official website and confirm the listed developer and provider rather than relying only on an App Store search result.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.