Crypto news

Once again, the old truth is confirmed: even experienced crypto market participants can fall victim to carefully crafted schemes. This time, the victim was a trader actively using the decentralized exchange Hyperliquid. He lost approximately $550,000 in USDC stablecoins after clicking a link from an advertisement in the Google search engine.

The attack mechanism is classic, but no less devastating for it. The attackers placed a paid advertisement in Google Ads that appeared in search results for queries related to Hyperliquid. The link led to a phishing site that almost perfectly copied the interface of the original DEX. The user, not noticing the trick, interacted with the fake platform, which allowed the scammers to gain control over his funds.

This incident reveals a systemic problem: advertising platforms, including Google, remain a weak link in the security chain. Despite claims of moderation, malicious ads continue to slip through, and their creators use sophisticated methods to bypass filters, including geotargeting and rapid domain switching.

For users of DeFi protocols, this case is a harsh reminder of the need for a radical overhaul of habits. Never click on advertising links, even if they look authentic. Always manually enter the exchange address in your browser or use bookmarks, and check the domain name before connecting your wallet. Implementing hardware wallets with mandatory transaction confirmation and using separate browsers for crypto operations can serve as an additional barrier against such threats.

My expertise: This case is not an isolated incident, but part of a growing trend of "advertising phishing" in the crypto industry. Over the past few months, I have recorded a 30-40% increase in the number of such attacks. Until major search giants implement stricter advertiser verification mechanisms, users will have to rely solely on their own vigilance. Invest time in setting up security, otherwise you risk investing money into scammers' wallets.