The DefiLlama analytical platform has postponed the release of its mobile app for Apple devices indefinitely. The reason for this decision was the project team’s prolonged struggle with phishing apps in the App Store that were disguised as the official service. The anonymous founder of the platform, using the pseudonym 0xngmi, said that the developers had been sending complaints to Apple for months, pointing to the fact that the service was being imitated and that trademark rights were being violated. One of the fake applications asked users for their seed phrase, after which the attackers gained access to all their funds.

To confirm the problem, DefiLlama specialists had to conduct a controlled experiment. The developers loaded funds into a small test wallet, installed the fake application, and linked a crypto wallet to it. As a result, all the funds from it were stolen by the attackers. The incident was carefully documented and submitted to Apple representatives, after which the phishing program was removed from the store a few days later. The founder of the platform did not specify exactly how much was lost from the test wallet during the experiment. After such a long period of ignoring requests, the DefiLlama management decided to postpone the release of the official iOS client until the risks of phishing programs spreading were minimized. A project representative noted that the team waited for all fake applications to be removed before releasing their own in order to avoid deceiving users.

The DefiLlama platform is a popular analytical service that collects data from decentralized protocols and displays cryptocurrency quotes, the volume of locked funds, and other statistics. In August, several large‑scale phishing attacks occurred under the guise of well‑known crypto services. On August 13, users of the Hyperliquid platform lost about $550,000 due to a fraudulent campaign involving paid ads on the Google search engine. Attackers used paid advertising ads, directing victims to fake interfaces. The manufacturer of hardware wallets, Trezor, also reported an increase in the number of fake websites masquerading as its brand, some of which appeared in Google search recommendations. A few days later, the Trezor team reported the theft of personal data from nearly fourteen thousand users and urged people to prepare for a new wave of phishing. Shortly after, SafePal, a manufacturer of hardware crypto wallets, stated that unknown individuals had gained access to the data of thirty‑nine thousand seven hundred and ninety‑eight clients.