DeFiLlama’s pseudonymous founder, generally known as 0xngmi, intentionally let a pretend DeFiLlama app drain a small take a look at pockets he had funded particularly to show the app was fraudulent, after months of trademark and impersonation complaints to Apple went nowhere.
What Occurred
DeFiLlama spent months reporting a pretend DeFiLlama app on the App Retailer by Apple’s abuse and trademark channels, citing impersonation and trademark violations, however Apple took no motion.
These complaints adopted Apple’s customary reporting course of, the form of formal discover an organization is anticipated to make use of, and but the itemizing remained stay all through.
0xngmi then loaded a small pockets with crypto, put in the counterfeit app himself, and confirmed it drained the funds precisely as anticipated.
He reported that consequence to Apple, and the app got here down inside days. “I do know it’s insane you need to do that to save lots of customers from clearly pretend apps,” he wrote in a publish on X, including that he was publicizing the episode so different crypto groups “don’t waste time like us.”
0xngmi described the app as a primary, shortly constructed copy of DeFiLlama whose sole objective was prompting customers for his or her seed phrase, the restoration phrases that grant full management of a crypto pockets.
How the Scammers Acquired Previous Apple’s Verification
Based on 0xngmi, the identical operators behind the pretend DeFiLlama app have been spamming lookalike apps impersonating different main crypto manufacturers, passing Apple’s identification checks by registering below defunct firms.
In DeFiLlama’s case, he mentioned the scammers accomplished know-your-customer verification utilizing a small shoe-shine enterprise included roughly 40 years earlier that not operates.
DeFiLlama’s group determined to delay the launch of its personal reputable app by months till each pretend model was faraway from the App Retailer, so no person would obtain a rip-off by mistake whereas looking for the actual factor.
The corporate already runs LlamaSearch, a listing of vetted crypto domains, constructed exactly as a result of search outcomes and app retailer listings get manipulated by impersonators so usually.
This Echoes a Sample Already in Litigation
This incident carefully mirrors a lawsuit already working by the courts. Three Bitcoin holders sued Apple in late July 2026 over a pretend Sparrow Pockets app that drained a mixed $1.8 million after they entered their seed phrases, a case our earlier protection of the Apple Sparrow Pockets lawsuit covers intimately.
In that case too, Sparrow Pockets’s precise creator had publicly flagged copycat apps since January 2024, and Apple was gradual to behave even after a direct report from the affected person.
That creator had reportedly tried submitting his personal App Retailer itemizing particularly to warn iOS customers that Sparrow doesn’t have a cell model, just for Apple to reject it and individually flag his developer account over unrelated issues, a call later reversed on attraction.
The DeFiLlama case follows the identical primary form: a reputable challenge’s group repeatedly warned Apple about impersonation, but the App Retailer’s pretend itemizing survived till one thing extra dramatic than a typical criticism pressured the problem.
What Comes Subsequent
Apple has not publicly commented on this particular incident as of this reporting. Whether or not the corporate adjusts the way it verifies developer identification or responds to impersonation complaints extra shortly going ahead would be the clearer sign of whether or not this case modifications something structurally, slightly than resolving as one remoted repair.
What this implies for you: the lesson holds no matter which particular app or platform is concerned. No reputable crypto pockets or DeFi app will ever want your seed phrase entered straight into it, and verifying a obtain by the developer’s personal official web site, slightly than trusting an app retailer itemizing or a search consequence by itself, stays essentially the most dependable safety towards this actual form of impersonation. Our wallets information and crypto scams to keep away from information each cowl this in additional depth.