DefiLlama Delays Mobile App After Founder 'Hacks' Own Wallet to Oust Apple Store Scams
The DeFi analytics platform pushed back its app debut after using a sacrificial wallet to prove the existence of phishing apps to Apple.
DefiLlama has delayed the launch of its official mobile application after discovering a series of phishing apps impersonating the platform on the Apple App Store. The decision comes after the platform's leadership took the unusual step of intentionally losing funds to force Apple to remove the fraudulent software.
To secure the removal of the scams, DefiLlama founder 0xngmi funded a small cryptocurrency wallet and intentionally allowed one of the fake applications to drain the assets. This move was designed to provide Apple with concrete, empirical evidence of the theft occurring through the app. According to reports from KuCoin News and Cointelegraph, the strategy worked; Apple removed the fraudulent application within days of receiving the evidence of the fund-draining event.
The Struggle with App Store Vetting
DefiLlama, a primary analytics hub for Total Value Locked (TVL) and blockchain metrics, had spent months attempting to resolve the issue through standard channels. The team repeatedly reported the malicious apps for trademark infringement and impersonation, but these efforts initially failed to trigger any action from Apple's moderation team. This friction forced the project to pivot from administrative reports to a live demonstration of the app's malicious capabilities.
Implications for Crypto Security
This incident underscores a persistent vulnerability in the centralized app ecosystem: the gap between automated vetting and the sophisticated nature of crypto-phishing. While Apple maintains strict guidelines, the DefiLlama case suggests that reports of impersonation are often insufficient to trigger removals. The fact that a developer felt compelled to sacrifice funds to prove a crime highlights a systemic failure in how app store moderators identify and react to blockchain-based scams.
Looking Ahead
While the specific fraudulent app in this instance was removed, the broader issue of 'copycat' apps remains a significant threat to DeFi users. The industry continues to grapple with how to protect non-technical users from apps that trick them into surrendering private keys or depositing funds into scam wallets. For now, DefiLlama's official mobile presence remains on hold as the platform prioritizes user safety over a rushed release.