Fake Curve Finance App Returns to App Store

Curve Dapp
A fake app impersonating Curve Finance has resurfaced on the Apple App Store, misleading users and causing financial losses despite previous removals.
Last updated:
Journalist
Journalist
Hassan Shittu
About Author

Hassan, a Cryptonews.com journalist with 6+ years of experience in Web3 journalism, brings deep knowledge across Crypto, Web3 Gaming, NFTs, and Play-to-Earn sectors. His work has appeared in...

Last updated:
Why Trust Cryptonews
For over a decade, Cryptonews has covered the cryptocurrency industry, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews
Ad DisclosureWe believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships.

A fraudulent fake app impersonating the popular decentralized finance (DeFi) platform Curve Finance has reappeared on Apple’s App Store for the third time this year.

The app is once again targeting unsuspecting users. Despite prior removals and warnings, the app continues to be listed on the store, attracting downloads and ranking prominently in finance categories across various regions.

Fake Crypto App Impersonating Curve Finance Causes Financial Losses for Users

The scam was spotlighted on October 26, after the fake platform gained traction in the Apple app store, ranking among the top 100 finance apps.

The fake app, disguised as a legitimate tool for token swaps and liquidity staking, has reportedly caused users to suffer major financial losses.

According to user reviews, funds have disappeared without explanation, and users report unauthorized withdrawals and unresponsive customer support.

One affected user stated they invested through the app only for their funds to “disappear without a trace.”

The app’s interface closely imitates Curve Finance’s logo and layout, making it appear genuine at first glance.

Babu Lal, co-founder of India-based cybersecurity firm Frautect, raised concerns first on X, calling the app a “global issue” that leads to “trust issues, unnecessary compliance burdens, and sometimes financial liability.”

Lal further explained that the repeated presence of these fake apps erodes trust in the crypto and DeFi sectors, adding, “The Web3 and crypto space is so nascent and early that instances like these push the sector down, fueling the debate around crypto’s legitimacy.”

Lal’s cybersecurity team has been tracking and reporting these fake apps, noting an uptick in similar scams.

“We’ve identified, reported, and taken down more than 6,500 fake publicly available apps, mostly in the finance category,” Lal stated.

Many of these apps imitate well-known platforms to exploit the growing interest in digital assets, often remaining on major app stores for extended periods before removal.

As a result of this new discovery, Curve Finance cautioned its users to stay vigilant. They have no official app yet and no plan to launch one. Therefore, anything claiming otherwise on either of the App Stores is likely fake.

Fake WalletConnect App on Google Play Steals Over $70,000 from Crypto Users

Similarly, on September 30, IT security firm Check Point Research revealed a crypto wallet drainer app on the Google Play Store that stole over $70,000 from users in five months.

The app was disguised as WalletConnect, a popular protocol linking crypto wallets to DeFi apps. The malicious app used “advanced evasion techniques” to remain undetected and accumulate over 10,000 downloads.

Check Point noted this was the first time wallet drainers exclusively targeted mobile users. Fake reviews and consistent branding boosted its search ranking, helping scam around 150 users.

Not all users were affected; some did not connect their wallets or recognize the scam in time.

Originally, the app was published as “Mestox Calculator,” but the name and appearance changed repeatedly, with a harmless calculator landing page to pass Google Play’s checks.

If a user’s IP and device met certain criteria, they were redirected to the wallet-draining software “MS Drainer.”

Once users connected their wallets, attackers could transfer funds by requesting permissions that allowed them to access assets.

Google has since removed the app, but these types of incidents constantly remind us of the need for heightened vigilance when connecting wallets to mobile apps.

More Articles

DeFi News
Scammers Hack Rapper Wiz Khalifa’s X Account to Promote Fake Wiz Meme Coin
Jimmy Aki
Jimmy Aki
2024-11-04 17:33:47
Bitcoin News
Colorado Resident Loses $6,000 in Bitcoin to Scam Involving Fake Law Enforcement
Ruholamin Haqshanas
Ruholamin Haqshanas
2024-11-04 10:34:38
Crypto News in numbers
editors
Authors List + 66 More
2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors