$550K drained from Hyperliquid users via Google search ads. Here's the playbook:
Attacker bought a Google ad for "Hyperliquid" and ranked it above the legit site. Fake domain looked identical to the real platform.
Victims clicked the sponsored link thinking it was official. Connected their wallets. Signed malicious transactions.
Result: 3 on-chain transfers, all funds moved to attacker-controlled addresses. Total damage ~$550K in USDC.
This isn't some random Discord DM scam. This is paid placement on Google. If you're not manually typing URLs or using bookmarks, you're one misclick away from getting rekt.
Always verify the domain. Always check what you're signing. Google ads are not your friend in crypto.
Attacker bought a Google ad for "Hyperliquid" and ranked it above the legit site. Fake domain looked identical to the real platform.
Victims clicked the sponsored link thinking it was official. Connected their wallets. Signed malicious transactions.
Result: 3 on-chain transfers, all funds moved to attacker-controlled addresses. Total damage ~$550K in USDC.
This isn't some random Discord DM scam. This is paid placement on Google. If you're not manually typing URLs or using bookmarks, you're one misclick away from getting rekt.
Always verify the domain. Always check what you're signing. Google ads are not your friend in crypto.