DeFiLlama deliberately allowed fake app to drain wallet to force Apple removal
DeFiLlama founder 0xngmi deliberately allowed a fake App Store clone to drain a test wallet to force Apple into action. Despite months of trademark and impersonation complaints from the DeFi analytics platform, Apple only removed the fraudulent app days after receiving proof of the active theft. To protect users, DeFiLlama delayed its official mobile app launch until all fake versions were removed.
DeFiLlama fake app sting
▪Apple removed the fake DeFiLlama app within days after the DeFiLlama team presented documented proof that the app had drained their test wallet.
▪DeFiLlama founder 0xngmi downloaded a fake DeFiLlama app from the Apple App Store, funded a small wallet, and allowed the app to drain the funds to prove it was a scam.
Apple App Store moderation
▪DeFiLlama spent months flagging the fake app to Apple through abuse and trademark channels, citing impersonation and trademark violations, without receiving any action.
▪The operators of the fake DeFiLlama app bypassed Apple's identity checks by registering under a defunct shoe-shine business incorporated roughly 40 years earlier.
DeFiLlama official app delay
▪DeFiLlama operates LlamaSearch, a directory of vetted crypto domains, to help users avoid manipulated search and app-store results.
▪DeFiLlama delayed the launch of its official mobile app by months to prevent users from downloading the fake scam version by mistake.
Crypto app impersonation scams
▪A fake Ledger Live app on the Microsoft Store resulted in the theft of $588,000 across 38 transactions in November 2023.
▪Scammers stole over $400,000 from Uniswap users in May 2026 using fake Google ad listings, routing approximately 146 ETH to two attacker addresses.
▪A Hyperliquid trader lost approximately $550,000 in USDC on August 14, 2026, after a paid Google ad directed them to a cloned version of the exchange.
Wallet security verification practices
▪The fake DeFiLlama app functioned as a basic copy designed to prompt users for their seed phrases to gain full control of their crypto wallets.
▪Crypto users are advised to verify the developer of any application and use direct links from official project websites before connecting their wallets.
Story comments
Loading comments…