{"investigation":{"slug":"fake-uniswap-v4-airdrop-phishing-network-2026","entity_name":"Fake Uniswap V4 Airdrop Phishing Network (2026)","trust_score":0,"severity_base":null,"score_modifier":-5,"confidence":0.72,"status":"published","content_type":"investigation","summary":"A persistent, multi-vector phishing network impersonating Uniswap across fake airdrops, cloned interfaces, and fraudulent Google Search advertisements has operated across multiple campaigns since at least 2022. The most recent and documented wave, active from late 2025 through May 2026, uses drainer-as-a-service tooling — primarily the AngelFerno kit — to trick victims into signing malicious wallet-approval transactions via Google Ads placed above legitimate Uniswap search results. Verified aggregate losses across the discrete 2025–2026 Google Ads campaign episodes reach approximately $1.63 million; broader industry-wide wallet drainer losses in 2024 reached $494 million across all protocols according to Scam Sniffer, but that figure is not attributable to Uniswap impersonation alone.","sections":[{"content":"The 'Fake Uniswap V4 Airdrop Phishing Network' is a collective label for several overlapping but distinct phishing campaigns that exploit the Uniswap brand and user familiarity with airdrop mechanics to steal cryptocurrency. The campaigns share common infrastructure patterns — spoofed domains, malicious smart contract approvals, and either Google Ads placement or social media distribution — but differ in drainer tooling, timing, and the specific lure used.\n\nThree principal campaign clusters have been documented by security researchers and crypto news outlets:\n\n1. The July 2022 fake UNI airdrop: Malicious ERC-20 tokens were airdropped to approximately 73,399 addresses, directing recipients to a spoofed domain (uniswaplp.com). One victim lost approximately $8 million in wrapped bitcoin and USDC from a Uniswap v3 liquidity position after the underlying setApprovalForAll function granted the attacker full redemption rights.\n\n2. The February 2024 media-targeted social engineering campaign: A fraudster posing as a Uniswap Foundation communications representative successfully convinced several crypto media outlets to publish articles about a fabricated $10 million UNI airdrop timed to coincide with the legitimate Uniswap v4 announcement. The campaign used redirect links that could be swapped from legitimate Uniswap URLs to phishing sites after publication. CryptoSlate, which declined to publish, identified the redirect manipulation. No confirmed reader financial losses were reported for this specific episode.\n\n3. The 2025–2026 Google Ads / AngelFerno wave: Beginning no later than July 2025, scammers purchased Google Search sponsored advertisements targeting the 'Uniswap' keyword to place cloned Uniswap interfaces above organic search results. Victims who connected wallets and approved transactions on these pages had assets drained via the AngelFerno drainer-as-a-service script. This wave escalated significantly from March 2026 onward and was still active as of the latest reporting in May 2026.","heading":"Overview and Campaign Scope","sources":[{"url":"https://www.coindesk.com/tech/2022/07/12/uniswap-user-loses-8m-worth-of-ether-in-phishing-attack","name":"Uniswap User Loses $8M Worth of Ether in Phishing Attack — CoinDesk","type":"news_article","credibility":1},{"url":"https://cryptoslate.com/fake-uniswap-10-million-airdrop-reported-as-several-prominent-crypto-media-scammed/","name":"Fake Uniswap $10 million airdrop reported as several prominent crypto media scammed — CryptoSlate","type":"news_article","credibility":1},{"url":"https://crypto.news/uniswap-phishing-campaign-on-google-ads-nets-attackers-over-400k/","name":"Uniswap phishing campaign on Google ads nets attackers over $400k — crypto.news","type":"news_article","credibility":2},{"url":"https://crypto.news/defi-loses-1-2m-fake-uniswap-site-phishing-scams-flood-google-ads/","name":"DeFi user loses $1.2m on fake Uniswap site as phishing scams flood Google Ads — crypto.news","type":"news_article","credibility":2}],"severity":"critical"},{"content":"All documented Uniswap impersonation campaigns rely on the same fundamental exploit: inducing victims to sign a wallet transaction that grants an attacker-controlled smart contract broad or unlimited transfer permissions, without the victim understanding what the approval entails.\n\nIn the 2022 campaign, Bleeping Computer and CoinDesk confirmed that attackers weaponized the ERC-721 setApprovalForAll function, disguised within a transaction presented as an airdrop claim. Once signed, this function transferred complete approval rights to the attacker's address, allowing all Uniswap v3 LP NFTs to be redeemed for their underlying ETH. Attackers also exploited the absence of validation between actual sender addresses and the emit function data in smart contracts, causing block explorers to display Uniswap as the apparent transaction sender — a technical obfuscation that increased apparent legitimacy.\n\nIn the 2025–2026 Google Ads campaigns, the mechanism evolved but the principle remained identical. Users who clicked a fake sponsored link, connected a wallet to the cloned interface, and confirmed a transaction unknowingly approved the malicious contract to drain whatever assets it could access. Protos reported that scammers also deployed Punycode URLs — domains using Cyrillic or other Unicode characters that are visually indistinguishable from 'app.uniswap.org' at a casual glance — to further obscure the phishing nature of the site.\n\nUniswap Labs confirmed in its official support documentation that the only legitimate Uniswap airdrop occurred on September 1, 2020, and that all subsequent airdrop announcements should be verified exclusively through the official Uniswap Labs or Uniswap Foundation X accounts before any wallet interaction.","heading":"Malicious Approval Mechanism","sources":[{"url":"https://www.bleepingcomputer.com/news/security/8-million-stolen-in-large-scale-uniswap-airdrop-phishing-attack/","name":"$8 million stolen in large-scale Uniswap airdrop phishing attack — Bleeping Computer","type":"news_article","credibility":1},{"url":"https://protos.com/fake-uniswap-phishing-ad-on-google-steals-traders-life-savings/","name":"Fake Uniswap phishing ad on Google steals trader's life savings — Protos","type":"news_article","credibility":2},{"url":"https://support.uniswap.org/hc/en-us/articles/17523020772365-Airdropped-NFT-or-Token-scams","name":"Airdropped NFT or Token scams — Uniswap Labs Official Support","type":"official","credibility":1}],"severity":"critical"},{"content":"The 2025–2026 wave is attributed by Blockaid and Protos to the AngelFerno drainer kit, a drainer-as-a-service (DaaS) script that automates wallet-draining across multiple blockchains (EVM-compatible chains, Solana, TRON, and XRP). AngelFerno operates on a revenue-sharing model in which affiliates — the scammers who deploy phishing sites and purchase Google Ads — receive approximately 75–85% of stolen funds, with the remainder retained by the kit's developers.\n\nBlockaid documented AngelFerno's distribution network on X (Twitter) between September 2025 and January 2026: 20 distinct X accounts were identified sharing malicious AngelFerno-powered dApps, posting thousands of tweets containing links to 75 separate malicious dApps. These accounts used aged profiles (10–15 years old) with artificially inflated follower counts, rebranded with crypto-themed names and '.eth' suffixes, and leveraged paid X Blue Check verification to appear credible. Posting was automated at high frequency, with each post directing to a fresh malicious dApp URL to evade link-based blocklists.\n\nFor Google Ads delivery, Blockaid also confirmed that AngelFerno deployed hidden iframes and secondary payloads invisible to Google's ad review systems, with traffic routed through attacker-controlled servers to intercept wallet approval data. A separate Blockaid post on X confirmed AngelFerno uses JavaScript obfuscation and anti-debugging methods to evade security tooling.\n\nAngelFerno is distinct from Angel Drainer, an earlier and larger drainer kit that held approximately 42% drainer-market share in Q1–Q2 2024 per Scam Sniffer. The naming similarity may cause attribution confusion. AngelFerno had previously been implicated in attacks on OpenEden and Curvance websites before pivoting to Uniswap-themed campaigns.","heading":"Drainer-as-a-Service Tooling: AngelFerno","sources":[{"url":"https://blockaid.io/blog/how-crypto-drainers-are-using-x-twitter-to-target-web3-users","name":"How Crypto Drainers Are Using X (Twitter) to Target Web3 Users — Blockaid","type":"research","credibility":2},{"url":"https://x.com/blockaid_/status/1942790637113508266","name":"Blockaid on X: AngelFerno JS obfuscation and anti-debugging","type":"social_media","credibility":3},{"url":"https://protos.com/fake-uniswap-phishing-ad-on-google-steals-traders-life-savings/","name":"Fake Uniswap phishing ad on Google steals trader's life savings — Protos","type":"news_article","credibility":2},{"url":"https://drops.scamsniffer.io/scam-sniffer-2024-web3-phishing-attacks-wallet-drainers-drain-494-million/","name":"Scam Sniffer 2024: Web3 Phishing Attacks — Wallet Drainers Drain $494 Million","type":"research","credibility":2}],"severity":"critical"},{"content":"The 2025–2026 campaign relied on Google Search paid advertising as its primary distribution channel, a tactic first prominently observed with Uniswap impersonation in at least July 2025. Attackers purchased sponsored placements for branded search terms — primarily 'Uniswap' — ensuring their phishing domain appeared above legitimate organic results in standard Google Search views.\n\nTo evade Google's ad review systems, the campaign employed several documented cloaking techniques. Hidden iframes and secondary payloads were used that are invisible during automated review but activate when a human user loads the page. Traffic was routed through attacker-controlled proxy servers to intercept or modify wallet interactions. Punycode URLs using Cyrillic or other Unicode characters created domains visually indistinguishable from 'app.uniswap.org' in browser address bars. Cloudflare infrastructure was also used to shield malicious domains from automated security tools, per Blockaid's operational analysis of AngelFerno.\n\nThe Security Alliance (SEAL) tracked a significant escalation of these Google Search phishing campaigns beginning in March 2026. In a reporting window of March 13–30, 2026 alone, SEAL attributed $1.27 million in losses to malicious Google advertisements targeting multiple DeFi protocols. Over the prior year, SEAL reported blocking more than 356 malicious advertisement links. SEAL also identified Uniswap as the most frequently impersonated brand in its dataset, accounting for 41% of all detected malicious sites, followed by Morpho Finance at 31%.\n\nThe attackers rotated to new domains rapidly as older ones were flagged and taken down. The low barrier to purchasing new Google Ads placements and registering replacement domains made sustained campaign disruption difficult despite repeated warnings and public disclosures.","heading":"Ad Cloaking and Infrastructure","sources":[{"url":"https://cryptobriefing.com/scammers-steal-400k-fake-uniswap-google-ads/","name":"Scammers steal over $400K through fake Uniswap ads on Google Search — Crypto Briefing","type":"news_article","credibility":2},{"url":"https://crypto.news/uniswap-phishing-campaign-on-google-ads-nets-attackers-over-400k/","name":"Uniswap phishing campaign on Google ads nets attackers over $400k — crypto.news","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/05/26/fake-google-ads-target-uniswap-users-in-400k-crypto-scam/","name":"Fake Google Ads Target Uniswap Users in $400K Crypto Scam — CryptoTimes","type":"news_article","credibility":2},{"url":"https://blockaid.io/blog/how-crypto-drainers-are-using-x-twitter-to-target-web3-users","name":"How Crypto Drainers Are Using X (Twitter) to Target Web3 Users — Blockaid","type":"research","credibility":2}],"severity":"high"},{"content":"Financial loss figures for Uniswap impersonation campaigns vary substantially across sources, and several large aggregate numbers circulating in lower-credibility outlets could not be verified against primary sources. This section reports only figures with clear attribution to credible reporting.\n\nVerified and credibly attributed losses:\n- July 2022 campaign: Approximately $8 million (7,574 ETH) stolen from one primary victim, a Uniswap v3 liquidity provider, confirmed by CoinDesk and Bleeping Computer. Funds were moved through Tornado Cash.\n- July 21, 2025 Google Ads incident: A single victim lost $1.23 million in Uniswap v3 NFTs, reported by crypto.news citing Scam Sniffer.\n- February 2026 Google Ads incident: A trader publicly identified as 'Ika' on X reported losing a mid-six-figure sum (estimated $100,000–$999,999 range; exact amount unconfirmed), reported by Protos. Uniswap founder Hayden Adams publicly warned about this incident.\n- March 13–30, 2026 SEAL campaign window: $1.27 million in losses attributed by SEAL across all DeFi protocol impersonation campaigns (Uniswap, PancakeSwap, Morpho Finance, Hyperliquid, CoW Swap, Ledger), not solely Uniswap.\n- May 2026 Google Ads campaign: At least $400,000, attributed by on-chain analyst b-block to two identified attacker wallets holding 146 ETH (~$306,000) at the time of discovery; total figure of '$400,000+' reflects inferred aggregate, reported by crypto.news and Crypto Briefing.\n\nFigures that could not be verified and should be treated with skepticism:\n- Claims of '$500 million stolen via fake Uniswap v4 airdrops in 2026' appeared in at least one low-credibility aggregator; this figure could not be traced to any primary source or credible security firm report and is not endorsed here.\n- Claims of '$12 million' lost to a Uniswap V4 clone tricking users into fake liquidity pools also appeared in summary-style articles without primary source attribution and are excluded.\n\nThe Scam Sniffer 2024 annual figure of $494 million reflects all wallet drainer victims across all protocols and phishing campaigns industry-wide, not Uniswap-specific losses.","heading":"Documented Financial Losses (Verified vs. Alleged)","sources":[{"url":"https://www.coindesk.com/tech/2022/07/12/uniswap-user-loses-8m-worth-of-ether-in-phishing-attack","name":"Uniswap User Loses $8M Worth of Ether in Phishing Attack — CoinDesk","type":"news_article","credibility":1},{"url":"https://crypto.news/defi-loses-1-2m-fake-uniswap-site-phishing-scams-flood-google-ads/","name":"DeFi user loses $1.2m on fake Uniswap site as phishing scams flood Google Ads — crypto.news","type":"news_article","credibility":2},{"url":"https://protos.com/fake-uniswap-phishing-ad-on-google-steals-traders-life-savings/","name":"Fake Uniswap phishing ad on Google steals trader's life savings — Protos","type":"news_article","credibility":2},{"url":"https://crypto.news/uniswap-phishing-campaign-on-google-ads-nets-attackers-over-400k/","name":"Uniswap phishing campaign on Google ads nets attackers over $400k — crypto.news","type":"news_article","credibility":2},{"url":"https://drops.scamsniffer.io/scam-sniffer-2024-web3-phishing-attacks-wallet-drainers-drain-494-million/","name":"Scam Sniffer 2024: Web3 Phishing Attacks — Wallet Drainers Drain $494 Million","type":"research","credibility":2}],"severity":"high"},{"content":"On February 16, 2024, a scammer posing as a Uniswap Foundation communications representative contacted multiple crypto news outlets offering to place press coverage of a claimed $10 million UNI token airdrop timed to coincide with anticipated announcements around Uniswap v4. The scammer built credibility by referencing a purported relationship with 'Uniswap's VP of Communication' and offering favorable payment coverage terms.\n\nThe press release contained links that initially pointed to the legitimate Uniswap website but were structured using redirect parameters that could be silently changed to redirect to any URL after publication — a technique that would allow the scammer to swap in phishing URLs once articles were live. DailyCoin, CryptoNews, and other outlets published articles about the alleged airdrop before the campaign was identified as fraudulent. CryptoSlate identified the redirect manipulation technique and declined to publish.\n\nThis campaign was timed to exploit genuine user anticipation of a Uniswap v4 launch announcement. In reality, Uniswap v4 did not launch until January 31, 2025 — approximately eleven months after this campaign ran. No confirmed financial losses from readers were reported at the time of initial coverage, as the campaign appears to have been identified before widespread wallet interaction occurred. However, the use of Uniswap v4 anticipation as social engineering bait was a documented precursor to the same lure used in subsequent 2025–2026 campaigns.","heading":"February 2024 Media Social Engineering Campaign","sources":[{"url":"https://cryptoslate.com/fake-uniswap-10-million-airdrop-reported-as-several-prominent-crypto-media-scammed/","name":"Fake Uniswap $10 million airdrop reported as several prominent crypto media scammed — CryptoSlate","type":"news_article","credibility":1},{"url":"https://www.cryptotimes.io/2024/02/16/fake-10m-uniswap-airdrop-scam-tragets-crypto-media/","name":"Fake $10M Uniswap Airdrop Scam Targets Crypto Media — CryptoTimes","type":"news_article","credibility":2},{"url":"https://cryptonews.com/news/crypto-media-houses-taken-in-by-fake-10m-uniswap-airdrop-scam/","name":"Crypto Media Houses Taken In By Fake $10M Uniswap Airdrop Scam — CryptoNews","type":"news_article","credibility":2},{"url":"https://blog.uniswap.org/uniswap-v4-is-here","name":"Uniswap v4 Is Here — Uniswap Blog (confirming January 31, 2025 actual launch date)","type":"official","credibility":1}],"severity":"medium"},{"content":"Uniswap founder Hayden Adams issued public warnings about fake Google Ads impersonating the platform on at least two documented occasions in 2026. Following the February 2026 'Ika' incident (a trader publicly reporting losing their 'entire net worth'), Adams posted on X stating that scam ads 'keep returning despite years of reporting,' and characterized Google's ad review as structurally insufficient due to the platform's financial incentive from per-click revenue regardless of advertiser legitimacy.\n\nIn response to the May 2026 wave, Adams again warned users to never click sponsored links for DeFi protocols and to bookmark the official URL directly. The Security Alliance (SEAL) extended these warnings with data, reporting that Uniswap was the most impersonated DeFi brand at 41% of all detected malicious phishing sites, and that more than 356 malicious advertisement links had been blocked over the prior year.\n\nUniswap Labs maintains official support documentation noting that the only legitimate Uniswap airdrop was in September 2020, that all airdrop announcements should be verified only via official social accounts, and warning that scammers use both airdropped NFTs and malicious NFT contracts to trick users into approving fund transfers. MetaMask added the 2022 phishing domain to its warning list. Scam Sniffer's anti-phishing databases are deployed by Binance, Rabby Wallet, Phantom, and Bybit, and the July 2025 $1.23 million incident was reported through Scam Sniffer monitoring.","heading":"Official Warnings and Industry Response","sources":[{"url":"https://en.cryptonomist.ch/2026/02/21/uniswap-scam-adams-warns/","name":"Uniswap scam warnings as founder denounces fake search ads — Cryptonomist","type":"news_article","credibility":2},{"url":"https://www.tradingview.com/news/coinpedia:255d70b77094b:0-uniswap-founder-warns-of-scam-ads-after-investor-loses-mid-six-figure-crypto-portfolio/","name":"Uniswap Founder Warns of Scam Ads After Investor Loses Mid-Six-Figure Crypto Portfolio — TradingView News","type":"news_article","credibility":2},{"url":"https://support.uniswap.org/hc/en-us/articles/17523020772365-Airdropped-NFT-or-Token-scams","name":"Airdropped NFT or Token scams — Uniswap Labs Official Support","type":"official","credibility":1},{"url":"https://usethebitcoin.com/news/fake-uniswap-google-ads-400k/","name":"Fake Uniswap Google Ads Drain Over $400K in Crypto Phishing Campaign — UseTheBitcoin","type":"news_article","credibility":2}],"severity":"medium"},{"content":"The Uniswap impersonation campaigns operate within a well-documented drainer-as-a-service (DaaS) industry that industrialized during 2023–2024. Scam Sniffer's 2024 annual report documented $494 million stolen across all wallet drainer campaigns from 332,000 victim addresses — a 67% year-over-year increase. In Q1–Q2 2024, the drainer market was led by Angel Drainer (42% share), Pink Drainer (28%), and Inferno Drainer (22%). Pink Drainer exited in Q2 2024; Inferno Drainer announced its exit in Q4 2024. The AngelFerno kit documented in the 2025–2026 Uniswap campaigns is a separate tool from the earlier Angel Drainer and should not be conflated with it despite the similar name.\n\nThe DaaS model enables actors with limited technical capability to rent turnkey drainer kits, purchase Google Ads, and receive the majority of stolen funds automatically. The developer of the kit takes a 15–25% cut of proceeds, providing ongoing financial incentive to maintain and improve evasion techniques. This model explains why the Uniswap-themed campaigns have recurred persistently despite repeated warnings and domain takedowns — the barrier to launching a new campaign is low and the per-victim yield can be substantial.\n\nIn the broader 2026 environment, CertiK reported $370.3 million stolen across 40 incidents in January 2026 alone, characterizing it as one of the worst months for crypto theft in nearly a year. Uniswap-impersonation phishing is one identifiable component of this wider theft landscape, not its entirety.","heading":"Broader Drainer Ecosystem Context","sources":[{"url":"https://drops.scamsniffer.io/scam-sniffer-2024-web3-phishing-attacks-wallet-drainers-drain-494-million/","name":"Scam Sniffer 2024: Web3 Phishing Attacks — Wallet Drainers Drain $494 Million","type":"research","credibility":2},{"url":"https://blockaid.io/blog/how-crypto-drainers-are-using-x-twitter-to-target-web3-users","name":"How Crypto Drainers Are Using X (Twitter) to Target Web3 Users — Blockaid","type":"research","credibility":2},{"url":"https://www.gncrypto.news/news/uniswap-scam-ads-return-as-trader-reports-heavy-loss/","name":"Hayden Adams flags new wave of Uniswap scam ads — GNCrypto","type":"news_article","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2020-09","event":"Uniswap Labs conducts the only legitimate UNI token airdrop. All subsequent airdrop claims using the Uniswap name are fraudulent per official Uniswap support documentation.","source":"Uniswap Labs Official Support","source_url":"https://support.uniswap.org/hc/en-us/articles/17523020772365-Airdropped-NFT-or-Token-scams","date_original":"2020-09-01"},{"date":"2022-07-12","event":"Attackers airdrop a malicious ERC-20 token disguised as a UNI airdrop to approximately 73,399 Uniswap v3 liquidity providers. One victim loses approximately $8 million (7,574 ETH) in WBTC and USDC via a setApprovalForAll exploit on spoofed domain uniswaplp.com. Stolen funds moved through Tornado Cash.","source":"CoinDesk / Bleeping Computer","source_url":"https://www.coindesk.com/tech/2022/07/12/uniswap-user-loses-8m-worth-of-ether-in-phishing-attack"},{"date":"2024-02-16","event":"A fraudster posing as a Uniswap Foundation representative convinces multiple crypto media outlets including DailyCoin and CryptoNews to publish articles about a fabricated $10 million UNI V4 airdrop. CryptoSlate declines after identifying post-publication redirect link manipulation. No confirmed reader financial losses reported.","source":"CryptoSlate","source_url":"https://cryptoslate.com/fake-uniswap-10-million-airdrop-reported-as-several-prominent-crypto-media-scammed/"},{"date":"2025-01-31","event":"Uniswap v4 officially launches on mainnet across 10 chains, following nine independent audits and a $15.5 million bug bounty program. No protocol vulnerabilities found. Legitimate V4 launch removes the anticipatory lure but scammers continue to use the V4 branding.","source":"Uniswap Blog","source_url":"https://blog.uniswap.org/uniswap-v4-is-here"},{"date":"2025-07-21","event":"A DeFi user loses $1.23 million in Uniswap v3 NFTs after signing a malicious transaction on a phishing site reached via a fake Google Ad. Scam Sniffer reports the incident. AngelFerno drainer implicated in the attack.","source":"crypto.news","source_url":"https://crypto.news/defi-loses-1-2m-fake-uniswap-site-phishing-scams-flood-google-ads/"},{"date":"2025-09","event":"Blockaid begins documenting AngelFerno distribution network on X (Twitter), identifying 20 accounts sharing 75 malicious dApps via thousands of automated posts through January 2026.","source":"Blockaid","source_url":"https://blockaid.io/blog/how-crypto-drainers-are-using-x-twitter-to-target-web3-users","date_original":"2025-09-01"},{"date":"2026-02-17","event":"A DeFi trader known on X as 'Ika' publicly reports losing their entire net worth (reported as mid-six-figures) after clicking a fake sponsored Uniswap link at the top of a Google search. Uniswap founder Hayden Adams issues public warning about fake search ads.","source":"Protos / Cryptonomist","source_url":"https://protos.com/fake-uniswap-phishing-ad-on-google-steals-traders-life-savings/"},{"date":"2026-03-13","event":"Security Alliance (SEAL) documents the start of a significant escalation in Google Search phishing campaigns targeting multiple DeFi protocols including Uniswap. Over March 13–30, 2026, SEAL attributes $1.27 million in losses across this campaign cluster.","source":"crypto.news / Crypto Briefing","source_url":"https://cryptobriefing.com/scammers-steal-400k-fake-uniswap-google-ads/"},{"date":"2026-05-25","event":"On-chain analyst b-block posts a public warning identifying two attacker wallets holding 146 ETH (~$306,000) linked to the ongoing fake Uniswap Google Ads campaign. Multiple outlets report cumulative losses of at least $400,000 from this campaign wave. SEAL confirms Uniswap accounts for 41% of all detected malicious DeFi phishing sites.","source":"crypto.news / Crypto Briefing","source_url":"https://crypto.news/uniswap-phishing-campaign-on-google-ads-nets-attackers-over-400k/"}],"sources_used":[{"url":"https://www.coindesk.com/tech/2022/07/12/uniswap-user-loses-8m-worth-of-ether-in-phishing-attack","name":"Uniswap User Loses $8M Worth of Ether in Phishing Attack — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260725001706/https://www.coindesk.com/tech/2022/07/12/uniswap-user-loses-8m-worth-of-ether-in-phishing-attack","credibility":1,"archive_timestamp":"2026-07-25T00:17:06+00:00"},{"url":"https://www.bleepingcomputer.com/news/security/8-million-stolen-in-large-scale-uniswap-airdrop-phishing-attack/","name":"$8 million stolen in large-scale Uniswap airdrop phishing attack — Bleeping Computer","type":"news_article","archive_url":"http://web.archive.org/web/20250915145044/https://www.bleepingcomputer.com/news/security/8-million-stolen-in-large-scale-uniswap-airdrop-phishing-attack/","credibility":1,"archive_timestamp":"2025-09-15T14:50:44+00:00"},{"url":"https://decrypt.co/104916/hackers-nab-8m-ethereum-uniswap-phishing-attack","name":"Hackers Nab $8M in Ethereum via Uniswap Phishing Attack — Decrypt","type":"news_article","archive_url":"http://web.archive.org/web/20260422152607/https://decrypt.co/104916/hackers-nab-8m-ethereum-uniswap-phishing-attack","credibility":1,"archive_timestamp":"2026-04-22T15:26:07+00:00"},{"url":"https://cryptoslate.com/fake-uniswap-10-million-airdrop-reported-as-several-prominent-crypto-media-scammed/","name":"Fake Uniswap $10 million airdrop reported as several prominent crypto media scammed — CryptoSlate","type":"news_article","archive_url":"http://web.archive.org/web/20251114180550/https://cryptoslate.com/fake-uniswap-10-million-airdrop-reported-as-several-prominent-crypto-media-scammed/","credibility":1,"archive_timestamp":"2025-11-14T18:05:50+00:00"},{"url":"https://cryptonews.com/news/crypto-media-houses-taken-in-by-fake-10m-uniswap-airdrop-scam/","name":"Crypto Media Houses Taken In By Fake $10M Uniswap Airdrop Scam — CryptoNews","type":"news_article","archive_url":"https://web.archive.org/web/20260726191402/https://cryptonews.com/news/crypto-media-houses-taken-in-by-fake-10m-uniswap-airdrop-scam/","credibility":2,"archive_timestamp":"2026-07-26T19:14:02+00:00"},{"url":"https://www.cryptotimes.io/2024/02/16/fake-10m-uniswap-airdrop-scam-tragets-crypto-media/","name":"Fake $10M Uniswap Airdrop Scam Targets Crypto Media — CryptoTimes","type":"news_article","archive_url":"https://web.archive.org/web/20260726194613/https://www.cryptotimes.io/2024/02/16/fake-10m-uniswap-airdrop-scam-tragets-crypto-media/","credibility":2,"archive_timestamp":"2026-07-26T19:46:13+00:00"},{"url":"https://support.uniswap.org/hc/en-us/articles/17523020772365-Airdropped-NFT-or-Token-scams","name":"Airdropped NFT or Token scams — Uniswap Labs Official Support","type":"official","archive_url":"http://web.archive.org/web/20251128125858/https://support.uniswap.org/hc/en-us/articles/17523020772365-Airdropped-NFT-or-Token-scams","credibility":1,"archive_timestamp":"2025-11-28T12:58:58+00:00"},{"url":"https://blog.uniswap.org/uniswap-v4-is-here","name":"Uniswap v4 Is Here — Uniswap Blog","type":"official","archive_url":"http://web.archive.org/web/20260331010734/https://blog.uniswap.org/uniswap-v4-is-here","credibility":1,"archive_timestamp":"2026-03-31T01:07:34+00:00"},{"url":"https://crypto.news/defi-loses-1-2m-fake-uniswap-site-phishing-scams-flood-google-ads/","name":"DeFi user loses $1.2m on fake Uniswap site as phishing scams flood Google Ads — crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20250906132427/https://crypto.news/defi-loses-1-2m-fake-uniswap-site-phishing-scams-flood-google-ads/","credibility":2,"archive_timestamp":"2025-09-06T13:24:27+00:00"},{"url":"https://protos.com/fake-uniswap-phishing-ad-on-google-steals-traders-life-savings/","name":"Fake Uniswap phishing ad on Google steals trader's life savings — Protos","type":"news_article","archive_url":"http://web.archive.org/web/20260307144128/https://protos.com/fake-uniswap-phishing-ad-on-google-steals-traders-life-savings/","credibility":2,"archive_timestamp":"2026-03-07T14:41:28+00:00"},{"url":"https://en.cryptonomist.ch/2026/02/21/uniswap-scam-adams-warns/","name":"Uniswap scam warnings as founder denounces fake search ads — Cryptonomist","type":"news_article","archive_url":"https://web.archive.org/web/20260726143625/https://en.cryptonomist.ch/2026/02/21/uniswap-scam-adams-warns/","credibility":2,"archive_timestamp":"2026-07-26T14:36:25+00:00"},{"url":"https://crypto.news/uniswap-phishing-campaign-on-google-ads-nets-attackers-over-400k/","name":"Uniswap phishing campaign on Google ads nets attackers over $400k — crypto.news","type":"news_article","archive_url":"https://web.archive.org/web/20260726084310/https://crypto.news/uniswap-phishing-campaign-on-google-ads-nets-attackers-over-400k/","credibility":2,"archive_timestamp":"2026-07-26T08:43:10+00:00"},{"url":"https://cryptobriefing.com/scammers-steal-400k-fake-uniswap-google-ads/","name":"Scammers steal over $400K through fake Uniswap ads on Google Search — Crypto Briefing","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.cryptotimes.io/2026/05/26/fake-google-ads-target-uniswap-users-in-400k-crypto-scam/","name":"Fake Google Ads Target Uniswap Users in $400K Crypto Scam — CryptoTimes","type":"news_article","archive_url":"http://web.archive.org/web/20260725235951/https://www.cryptotimes.io/2026/05/26/fake-google-ads-target-uniswap-users-in-400k-crypto-scam/","credibility":2,"archive_timestamp":"2026-07-25T23:59:51+00:00"},{"url":"https://usethebitcoin.com/news/fake-uniswap-google-ads-400k/","name":"Fake Uniswap Google Ads Drain Over $400K in Crypto Phishing Campaign — UseTheBitcoin","type":"news_article","archive_url":"https://web.archive.org/web/20260727044234/https://usethebitcoin.com/news/fake-uniswap-google-ads-400k/","credibility":2,"archive_timestamp":"2026-07-27T04:42:34+00:00"},{"url":"https://en.cryptonomist.ch/2026/05/26/uniswap-phishing-google-ads/","name":"Uniswap phishing Google Ads: fake ads drain $400,000 — Cryptonomist","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://blockaid.io/blog/how-crypto-drainers-are-using-x-twitter-to-target-web3-users","name":"How Crypto Drainers Are Using X (Twitter) to Target Web3 Users — Blockaid","type":"research","archive_url":"http://web.archive.org/web/20260422012747/https://blockaid.io/blog/how-crypto-drainers-are-using-x-twitter-to-target-web3-users","credibility":2,"archive_timestamp":"2026-04-22T01:27:47+00:00"},{"url":"https://x.com/blockaid_/status/1942790637113508266","name":"Blockaid on X: AngelFerno JS obfuscation and anti-debugging","type":"social_media","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://drops.scamsniffer.io/scam-sniffer-2024-web3-phishing-attacks-wallet-drainers-drain-494-million/","name":"Scam Sniffer 2024: Web3 Phishing Attacks — Wallet Drainers Drain $494 Million","type":"research","archive_url":"http://web.archive.org/web/20260526031858/https://drops.scamsniffer.io/scam-sniffer-2024-web3-phishing-attacks-wallet-drainers-drain-494-million/","credibility":2,"archive_timestamp":"2026-05-26T03:18:58+00:00"},{"url":"https://www.tradingview.com/news/coinpedia:255d70b77094b:0-uniswap-founder-warns-of-scam-ads-after-investor-loses-mid-six-figure-crypto-portfolio/","name":"Uniswap Founder Warns of Scam Ads After Investor Loses Mid-Six-Figure Crypto Portfolio — TradingView News","type":"news_article","archive_url":"http://web.archive.org/web/20260304155334/https://www.tradingview.com/news/coinpedia:255d70b77094b:0-uniswap-founder-warns-of-scam-ads-after-investor-loses-mid-six-figure-crypto-portfolio/","credibility":2,"archive_timestamp":"2026-03-04T15:53:34+00:00"},{"url":"https://protos.com/this-uniswap-airdrop-promised-2k-instead-it-stole-8m/","name":"This Uniswap airdrop promised $2K — instead it stole $8M — Protos","type":"news_article","archive_url":"http://web.archive.org/web/20260305104208/https://protos.com/this-uniswap-airdrop-promised-2k-instead-it-stole-8m/","credibility":2,"archive_timestamp":"2026-03-05T10:42:08+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-06-07T23:29:38.854334+00:00","updated_at":"2026-08-02T10:20:35.019494+00:00"}}