Finst

Phishing attack on Uniswap

Phishing methods were used to steal tokens from Uniswap users.

By Mike Hesp
• 3 min read
Phishing attack on Uniswap

There were phishing methods used to steal tokens from Uniswap users. The damage could run into the millions.

On Monday, there was a targeted phishing attack on liquidity providers (LPs) of the Uniswap v3 protocol. At least $4.7 million worth of Ethereum was stolen.

The attack allegedly sent manipulated tokens to Uniswap users. After they were redirected to a website where they were supposed to swap their Uniswap LP tokens for UNI tokens, the attackers gained access to the wallet.

"From block 151,223.32 there were 73,399 addresses that received a malicious token to attack their holdings under the false impression of a UNI airdrop based on their LPs," Harry Denley, a staffer at Metamask, explained.

According to Binance CEO Changpeng Zhao, 4,295 ETH were stolen in the attack, about $4.7 million. The tokens were then "washed through Tornado Cash," Zhao said. Other Twitter users are reporting damages of $18 million.

Disclaimer: This content is for informational purposes only and does not constitute financial, investment, legal, or tax advice. The information provided may be incomplete, inaccurate, or outdated and should not be relied upon as such. Nothing on this website should be considered a recommendation to buy, sell, or hold any cryptocurrency. Investing in crypto-assets involves risk of loss.