Overview
- DeFiLlama reported a counterfeit DeFiLlama app to Apple for months and then funded a small test wallet that it connected to the fake app, which the project says was immediately drained.
- The team submitted the theft evidence to Apple and the impersonating app was removed within days, and DeFiLlama then published its official iOS and Android listings with DEFILLAMA LIMITED shown as the provider.
- DeFiLlama delayed its public mobile launch until the fake listings were taken down to avoid directing users to scam apps and to reduce the risk of irreversible on‑chain losses.
- The project has not released attacker addresses, the exact amount taken in its test, or a technical analysis of the malicious app, and Apple has not publicly explained why earlier trademark reports did not prompt faster action.
- Security researchers and past incidents involving Rabby, Ledger and Sparrow Wallet show a repeating pattern of cloned crypto apps reaching major app stores and causing real user losses, prompting projects to advise users to install apps only from official websites and verify developer names.