DeFiLlama founder 0xngmi says his team spent months reporting a fake DeFiLlama app on the Apple App Store for trademark infringement and impersonation, without success, according to Wu Blockchain. The counterfeit app was ultimately taken down, but only after a user reported losing funds after downloading it — not in response to the earlier trademark complaints.
The episode fits a broader, documented pattern of crypto-focused impersonation apps slipping past Apple's App Store review process. In one related case highlighted by Malwarebytes, Apple was accused in a lawsuit of allowing a different fraudulent crypto wallet app to remain listed long enough for victims to lose a combined $1.8 million.
Trademark Complaints Alone Weren't Enough
What stands out in DeFiLlama's account is the gap between the two enforcement triggers. Intellectual-property complaints — the kind any legitimate rights holder is supposed to be able to file to get an impersonating app removed — reportedly went nowhere for months. It took a concrete financial-harm report, the kind of complaint that typically involves real users losing real money, before Apple acted. That sequencing suggests Apple's review and takedown process may weight active fraud reports more heavily than trademark or brand-impersonation claims, even when the app in question is functionally designed to deceive.
A Recurring Problem for Crypto Brands
DeFiLlama, one of the most widely used DeFi analytics platforms, is a high-value target for impersonation precisely because users trust it to display accurate protocol and wallet data — making a convincing fake app a plausible vector for phishing or fund theft. Security researchers have separately catalogued dozens of similar fake wallet and analytics apps circulating on major app stores, underscoring that this isn't an isolated incident but a structural weak point in how platform operators police brand impersonation in the crypto sector specifically.
For now, 0xngmi's experience serves as a cautionary account for other crypto projects: formal trademark reporting channels may move slower than the fraud itself, and the fastest path to a takedown may end up being a user actually getting hurt.
