The DeFi analytics platform's team says fake apps impersonating its brand slowed Apple's review process for months.
DefiLlama, a widely used platform for tracking decentralized finance data, has confirmed that its mobile app rollout was pushed back. The founder said phishing apps using the DefiLlama name appeared on Apple's App Store before the official version could launch.
According to the founder, at least one fake app impersonating DefiLlama remained available for months before Apple removed it. The delay reportedly complicated the company's own submission process, since Apple's review systems had to account for confusion between the legitimate app and the impersonators.
DefiLlama has become one of the most referenced tools in the DeFi sector, aggregating data on total value locked across blockchains and protocols. Its website is used by traders, developers, and researchers to monitor liquidity and protocol activity. A mobile version has been anticipated by users who want the same tracking tools on smartphones.
Phishing apps targeting crypto brands are a recurring problem on major app stores. Fraudulent developers often clone the branding and interface of popular platforms, hoping to intercept user credentials, wallet seed phrases, or private keys. Because many crypto users trust official app store listings, these fakes can cause real financial harm before they are detected.
The DefiLlama founder's account highlights a broader tension between platform moderation speed and the pace at which malicious actors can exploit brand recognition. Crypto projects without a verified mobile presence are especially vulnerable, since impersonators can occupy that gap for extended periods.
Apple's App Store review process is designed to catch fraudulent submissions before publication. However, the founder's comments suggest that once a phishing app is live, removal can still take considerable time. This has raised questions from within the crypto community about how app store operators handle brand impersonation reports, particularly for decentralized finance projects that lack traditional corporate backing or trademark enforcement teams.
DefiLlama has not detailed the specific financial impact of the phishing apps, nor confirmed a new timeline for its official mobile launch. The founder's remarks were focused on explaining the delay rather than announcing a release date.
The episode underscores ongoing security risks tied to mobile app store distribution for crypto and DeFi brands. Users searching for legitimate crypto tools remain exposed to impersonation attempts, especially when official releases lag behind demand. For DefiLlama, the delay may affect user access to mobile-native tracking tools, though the platform's web interface remains unaffected.
The broader DeFi analytics sector could see renewed scrutiny of app store vetting processes as more protocols consider mobile expansion. Projects without dedicated legal or brand-protection resources may face similar delays if impersonators register apps first.
DefiLlama's experience illustrates the friction between fast-moving crypto brands and slower app store enforcement mechanisms. Until platforms like Apple speed up removal of impersonating apps, legitimate projects may continue to face delays bringing trusted tools to mobile users.
The founder said phishing apps impersonating DefiLlama appeared on Apple's App Store, complicating the timeline for releasing the official mobile app.
The founder said it took Apple several months to remove the phishing app impersonating DefiLlama, according to reporting on the statement.
No specific release date was given. The founder's comments addressed the reasons for delay rather than announcing a new launch timeline.
Fraudulent developers often copy the branding of popular crypto tools to trick users into entering sensitive information, such as wallet credentials, making brand impersonation a recurring threat across app stores.
SafePal Breach: Was There an Official Disclosure?
Bits of Gold Breach: Is 200,000 the Full Customer Base?
August 16, 2026
August 16, 2026
We measure how many people read this site. That is all it is used for — there is no ad network, no advertising cookie, and nothing sold to anyone. Decline and the site works exactly the same. What we collect