The breakthrough came when DefiLlama loaded a real wallet with real crypto and deliberately allowed a fraudulent application to drain the funds. As reported by crypto.news, TradingView News, and Cointelegraph, 0xngmi stated that the application was removed within days after this demonstration. The founder noted that "DefiLlama had tried for months to get one malicious app removed, but Apple took it down 'in days' after the team downloaded the app and documented a small wallet being drained." The app was described as a basic, quickly built copy of DeFiLlama whose sole purpose was prompting users for their seed phrase, the recovery words that grant full control of a crypto wallet. 0xngmi revealed that the same operators behind the fake DeFiLlama app have been spamming lookalike apps impersonating other major crypto brands, passing Apple's identity checks by registering under defunct companies. In DeFiLlama's case, he said the scammers completed know-your-customer verification using a small shoe-shine business incorporated roughly 40 years earlier that no longer operates.
DefiLlama founder 0xngmi revealed that the DeFi analytics platform delayed its mobile application launch while attempting to remove fraudulent applications impersonating the platform from Apple's App Store. According to reports from crypto.news, TradingView News, and Cointelegraph, the team reported fake applications for months over trademark and impersonation concerns without securing their removal. 0xngmi explained in a Saturday X post that the team "waited 'till all the fake apps were taken down before we launched ours to avoid any user getting scammed." The founder deliberately let a fake app drain a small test wallet to prove the fraudulent nature of the application, stating "I know it's insane you have to do this to save users from obviously fake apps." The incident closely mirrors a lawsuit already working through the courts, where three Bitcoin holders sued Apple in late July 2026 over a fake Sparrow Wallet app that drained a combined $1.8 million after they entered their seed phrases.
The DefiLlama case follows other documented incidents of fraudulent cryptocurrency applications reaching major app marketplaces. According to crypto.news, TradingView News, and Cointelegraph, fake apps mimicking well-known crypto products have shown up on Apple's platform before, with Rabby wallet and Curve Finance being impersonated by fraudulent listings in 2024. In November 2023, a fake Ledger Live app on the Microsoft Store resulted in the theft of $588,000 across 38 transactions. Apple is also facing the ongoing lawsuit involving three users who allege fake Sparrow Wallet apps caused $1.835 million in Bitcoin losses, though those allegations have not been tested in court. In April, a fake Ledger app cost musician G. Love nearly 6 BTC after he trusted an App Store download, while a Uniswap phishing clone took roughly $400,000 from traders in May. These incidents point to a recurring weak spot in how app stores vet financial software claiming to represent recognizable crypto brands.
Apple's App Review guidelines prohibit applications that impersonate other apps or services, barring developers from using another developer's icon, brand, or product name without permission. As reported by crypto.news, repeated impersonation can lead to removal from the Apple Developer Program. The DeFiLlama case mirrors a lawsuit already working through the courts, where three Bitcoin holders sued Apple in late July 2026 over a fake Sparrow Wallet app that drained a combined $1.8 million after they entered their seed phrases. In that case, Sparrow Wallet's actual creator had publicly flagged copycat apps since January 2024, and Apple was slow to act even after direct reports from affected users. That creator had reportedly tried submitting his own App Store listing specifically to warn iOS users that Sparrow doesn't have a mobile version, only for Apple to reject it and separately flag his developer account over unrelated concerns, a decision later reversed on appeal. Apple has previously reported rejecting more than 320,000 submissions in 2024 because they copied other apps, constituting spam or otherwise misleading users.
DefiLlama's official mobile application is now publicly available on both iOS and Android platforms. According to crypto.news, the iOS listing identifies the application as 'DefiLlama: DeFi Tracker' with DEFILLAMA LIMITED as the provider. The genuine application is accessible through DefiLlama's official website, which provides direct access to the legitimate mobile product with version 1.0.5 currently available.
