DefiLlama delays mobile app launch due to phishing apps on Apple Store
Founder explains they postponed the launch to prevent users from being scammed by fake apps.
1DefiLlama's delayed mobile launch
DefiLlama postponed the launch of its mobile app while waiting for Apple to remove phishing apps impersonating it from the App Store. Founder 0xngmi stated they waited until all fake apps were taken down to prevent users from being scammed. This process took months, with the company continuously pushing Apple to act. Eventually, Apple removed one fake app within days after DefiLlama documented it draining funds from a small crypto wallet.
2The fake app problem on Apple Store
Phishing apps mimicking DefiLlama on the Apple App Store were designed to steal users' funds. Such fake apps often impersonate major crypto brands to deceive users. Similar apps mimicking Rabby wallet and Curve Finance appeared in 2024. While Apple works continuously to detect and remove such apps, the problem persists. DefiLlama's experience highlights ongoing security vulnerabilities in the industry.
3Documenting the fake apps
DefiLlama's team downloaded a fake app and documented how it drained funds from a small crypto wallet. This evidence led Apple to remove the app within days. However, this followed months of effort. Founder 0xngmi emphasized they delayed launch to protect users, showcasing how critical security measures are in the crypto space. This incident underscores the importance of thorough documentation in fighting fraud.
4Historical precedents
Fake apps on Apple Store aren't new. In 2024, apps impersonating Rabby wallet and Curve Finance similarly scammed users. In November 2023, a fake Ledger Live app on Microsoft Store resulted in $588,000 stolen across 38 transactions. These cases show crypto security vulnerabilities remain an ongoing threat. DefiLlama's situation emphasizes the need for more effective preventive measures against such scams.
5Prioritizing user security
By delaying its mobile app launch, DefiLlama put user security first. Founder 0xngmi explained they waited until all impersonating apps were removed to prevent scams. This decision protected both users and the company's reputation, setting an example for the industry. In crypto, security must always be a top priority, and DefiLlama's approach demonstrates responsible practice others should follow.
6Apple's response timeline
Apple removed DefiLlama-documented fake apps within days - but only after months of pressure. The company maintained constant communication with Apple throughout this process. While this shows Apple can act quickly against fraudulent apps, it also reveals systemic gaps in prevention. More robust measures are needed to fully protect users from such security threats in app marketplaces.
7Crypto industry security gaps
DefiLlama's experience exposes persistent security vulnerabilities in crypto. Fake apps continuously evolve new methods to steal funds, requiring both companies and platforms to implement stronger safeguards. Users must also stay vigilant - downloading apps only from verified sources remains crucial. This multi-layered approach is essential to combat sophisticated phishing attempts in decentralized finance.
8Conclusions and recommendations
DefiLlama's launch delay underscores user security's critical importance. Ongoing crypto security vulnerabilities demand proactive measures from companies. Platforms like Apple must improve fake app detection and removal processes. User education about downloading only from trusted sources remains vital. Collective action across the ecosystem - from developers to platforms to end users - is required to effectively combat crypto phishing threats.