Crypto news

Another victim of scammers in the crypto space — a Hyperliquid platform user who lost about $550,000 in USDC stablecoins. The incident occurred after the trader clicked on an advertisement in the Google search engine that led to a fake website visually replicating the decentralized exchange's interface. After entering data and confirming the transaction, the attackers instantly withdrew funds from the victim's wallet.

How the scheme works

The phishing campaign was carefully thought out. The fake page did not just mimic Hyperliquid's design — it used dynamic elements to create the illusion of full legitimacy. The user, trusting the visual similarity and branding, interacted with the interface without suspecting a catch. This is a typical example of so-called "trust farming": the victim initiates the transaction themselves, making the attack virtually indistinguishable from normal DEX usage.

It is important to emphasize that this is not about hacking the Hyperliquid protocol or a vulnerability in smart contracts. The exchange's infrastructure remained secure — it was the user factor that suffered, which once again confirms: the main threat in DeFi today is social engineering and carelessness.

My analysis and recommendations

This case is not an isolated one. Scammers actively use paid ads in search engines to promote fake clones of popular platforms, and Hyperliquid has become another target due to its growing trading volume. In my practice, I recommend traders always check the domain manually, avoiding clicks on advertising links, and use hardware wallets with mandatory verification of the recipient's address before each transaction.

The crypto market continues to grow, but attack methods evolve alongside it. The loss of $550,000 is a painful lesson that should force all participants to reconsider their security habits. In the era of decentralization, responsibility for asset safety lies solely with the user, and ignoring basic hygiene rules can cost an entire fortune.