Hyperliquid User Loses 550,000 USDC Due to Google Ads Phishing; First Search Result Does Not Equal Official Website
A Hyperliquid user lost approximately 550,000 USDC after clicking on a phishing website in a Google search ad and connecting their wallet.
The user clicked on a sponsored result while searching for Hyperliquid, entered a highly counterfeit website, and authorized it, leading to funds being transferred in three transactions.
The phishing site had been reported previously but had upgraded its page to closely resemble the legitimate one.
Security experts confirmed that on-chain transfers were made to an address controlled by the attacker, and Google subsequently suspended the related ad account.
After contacting the security team, the user abandoned the pursuit for personal reasons and publicly shared their experience to warn others.
From a market perspective, Google ad phishing continues to threaten on-chain users, with funds flowing from personal wallets to attacker addresses, benefiting security service providers from rescue demands, while users face pressure to strengthen operational discipline.
Source: Public Information
ABAB AI Insight
As a popular perpetual contract DEX, Hyperliquid has repeatedly become a target for Google ad phishing. SEAL has previously intercepted hundreds of malicious ad URLs, indicating that attackers continue to target high-traffic platform keywords.
In terms of capital flow, attackers acquire traffic through paid ads and induce wallet authorizations, converting resources into immediate on-chain transfers, motivated by the intent to quickly exploit careless users by leveraging trust in search rankings.
Similar cases can be seen with phishing ads targeting platforms like Uniswap and Aave, as well as hardware wallet users being attacked by counterfeit sites; currently, DeFi users are in a phase where trust in ads coexists with on-chain risks.
The structural judgment indicates a technical substitution: search ads have become a primary attack vector, utilizing users' habitual trust in the top-ranked results to bypass direct protocol vulnerabilities.
ABAB News · Cognitive Laws
- First search result does not equal official website
- Old scams upgraded are more lethal
- Operational discipline is the last line of defense for on-chain assets.