DefiLlama, a large open-source data aggregator for decentralized finance, said it delayed the public launch of its mobile app after fake versions of the crypto analytics platform appeared in Apple's App Store.
The episode is drawing fresh scrutiny to how quickly major tech platforms respond when impersonation apps are reported.
Here's what to know
According to Crypto.news, the founder going by the name "0xngmi" said the launch delay was tied to fake apps using DefiLlama's name. According to the outlet, the team spent months reporting a lookalike listing on trademark and impersonation grounds.
Those complaints, he said, did not initially result in a takedown. The team then loaded a small test wallet, installed the suspicious app, and said the funds disappeared. "App was taken down in days after that," he wrote. He did not specify how much was lost from the test wallet.
In 0xngmi's account, as Crypto.news reported, the company delayed releasing its own app for safety reasons and "waited 'till all the fake apps were taken down before we launched ours to avoid any user getting scammed." Apple has not confirmed DefiLlama's version of the timeline.
More background
The incident combines two risks that can affect everyday users: app-store impersonation and crypto theft. People who are comfortable downloading software from major platforms may assume a listed app has already been thoroughly vetted, creating a false sense of security.
TCD Picks » Quince Spotlight
💡These best-sellers from Quince deliver affordable, sustainable luxury for all
That concern is amplified in crypto, where a single malicious app can expose wallets or trick users into connecting funds with little chance of recovery. While crypto can enable new financial tools and, in some cases, help fund innovative projects, including clean-energy development, the industry also carries well-documented drawbacks, including scam activity and, for some networks, high energy demand.
In that context, fake apps do more than damage one company's brand. They can also erode trust in legitimate tools that investors use to track decentralized finance markets, prices, and risk exposure.
The dispute also raises a broader accountability question for tech platforms: How much evidence should developers need to provide before an impersonating app is removed, especially when real money may be at risk?
What can be done?
The fake app cited by DefiLlama is gone, and the company's real app is publicly available. The listing shows the app name along with the developer and provider information.
An app's presence in a major marketplace is not, by itself, proof that it is legitimate. Cross-checking download links on a project's official website, confirming that the listed developer matches the company, and being wary if an app requests wallet access or other sensitive permissions right away can reduce risk.
Using a small test transaction before moving larger amounts can also help reduce risk, though even that is not foolproof.
Faster responses to trademark and impersonation complaints could reduce the chances that scam apps reach users in the first place.
Get TCD's free newsletters for easy tips, smart advice, and a chance to earn $5,000 toward home upgrades. To see more stories like this one, change your Google preferences here.
