An experienced crypto trader known as @ika_xbt lost their entire portfolio, valued at over $400K, after clicking a sponsored Google ad that looked exactly like the real Uniswap website. It wasn’t.
The phishing campaign, which surfaced on May 26, used cloned versions of Uniswap’s interface promoted through Google Search ads. Two wallets linked to the attackers have been identified holding a combined 146 ETH, roughly $306K at the time of discovery, with total stolen funds exceeding $400K.
How the scam works
Attackers buy sponsored ads on Google targeting the keyword “Uniswap.” When users search for the decentralized exchange, the fraudulent result appears above the legitimate organic listing. The fake site looks identical to the real thing.
Once a user connects their wallet and approves a transaction, the game is over. The malicious contract drains whatever it can access. Because blockchain transactions are irreversible, there’s no customer service line to call, no chargeback to file, no undo button.
