Disclaimer: Information found on CryptoreNews is those of writers quoted. It does not represent the opinions of CryptoreNews on whether to sell, buy or hold any investments. You are advised to conduct your own research before making any investment decisions. Use provided information at your own risk.
CryptoreNews covers fintech, blockchain and Bitcoin bringing you the latest crypto news and analyses on the future of money.
A fraudulent application mimicking the well-known decentralized finance (DeFi) platform Curve Finance has resurfaced on Apple’s App Store for the third time this year.
The app is once again targeting unsuspecting individuals. Despite previous removals and alerts, it remains available on the store, garnering downloads and achieving high rankings in finance categories across multiple regions.
Imposter Crypto App Mimicking Curve Finance Leads to Financial Losses for Users
The scam was highlighted on October 26, after the counterfeit platform gained popularity in the Apple app store, ranking among the top 100 finance applications.
The fraudulent app, masquerading as a legitimate tool for token exchanges and liquidity staking, has reportedly resulted in significant financial losses for users.
User reviews indicate that funds have vanished without explanation, with reports of unauthorized withdrawals and unresponsive customer service.
One affected individual mentioned they invested through the app only for their funds to “disappear without a trace.”
The app’s interface closely resembles Curve Finance’s logo and design, making it appear authentic at first glance.
Babu Lal, co-founder of the India-based cybersecurity firm Frautect, expressed concerns on X, labeling the app a “global issue” that creates “trust issues, unnecessary compliance burdens, and sometimes financial liability.”
Lal further elaborated that the persistent presence of these fraudulent apps undermines trust in the crypto and DeFi sectors, stating, “The Web3 and crypto space is so nascent and early that instances like these push the sector down, fueling the debate around crypto’s legitimacy.”
#ScamAlert: Another fake app is impersonating @CurveFinance on the Apple App Store, just days after the previous one was removed.
Financial institutions and consumers continue to be prime targets. What measures are brands taking to safeguard against these threats? pic.twitter.com/8EKpDMWHbO— Babu (@pooniawalla) November 5, 2024
Lal’s cybersecurity team has been monitoring and reporting these fraudulent applications, noting an increase in similar scams.
“We’ve identified, reported, and taken down more than 6,500 fake publicly available apps, mostly in the finance category,” Lal stated.
Related Posts
Many of these applications imitate reputable platforms to exploit the rising interest in digital assets, often remaining on major app stores for extended durations before being removed.
In light of this recent discovery, Curve Finance has advised its users to remain cautious. They currently do not have an official app and no plans to launch one. Therefore, any claims to the contrary on either of the App Stores are likely fraudulent.
Safety tip.
Scam applications can appear even on trusted platforms like the Apple Store – unfortunately, this is not uncommon. Just because an app is available doesn’t automatically make it trustworthy. It’s important to remember this and always download apps from verified… pic.twitter.com/nEtn4ABncJ— Curve Finance (@CurveFinance) November 7, 2024
Fraudulent WalletConnect App on Google Play Steals Over $70,000 from Crypto Users
Similarly, on September 30, IT security firm Check Point Research disclosed a crypto wallet draining application on the Google Play Store that siphoned over $70,000 from users within five months.
The app was disguised as WalletConnect, a widely used protocol connecting crypto wallets to DeFi applications. The malicious app employed “advanced evasion techniques” to evade detection and amassed over 10,000 downloads.
Check Point noted this was the first instance of wallet drainers specifically targeting mobile users. Fake reviews and consistent branding enhanced its search ranking, aiding in scamming around 150 users.
Not all users were impacted; some did not connect their wallets or recognized the scam in time.
Initially, the app was published as “Mestox Calculator,” but the name and appearance changed frequently, featuring a benign calculator landing page to pass Google Play’s checks.
If a user’s IP and device met specific criteria, they were redirected to the wallet-draining software “MS Drainer.”
Once users connected their wallets, attackers could transfer funds by requesting permissions that allowed them to access assets.
Google has since removed the app, but these incidents serve as a constant reminder of the necessity for increased vigilance when linking wallets to mobile applications.
The post Fake Curve Finance App Returns to App Store appeared first on Cryptonews.
