Over $4.7 million stolen in phishing attack on fake Uniswap token

Some initially interpreted the hack as a Uniswap v3 protocol exploit, but it was quickly clarified following a phishing campaign .

New

A sophisticated phishing campaign targeting Uniswap v3 protocol liquidity providers (LPs) has seen attackers steal at least $4.7 million worth of Ether (ETH). However, the community reports that the losses could be even greater.

MetaMask security researcher Harry Denley was one of the first to sound the alarm about the attack, telling his 13,000 Twitter followers on Monday that 73,399 addresses had received ERC tokens -20 malicious to steal their assets.

⚠️ At block 151,223,32, there were 73,399 addresses that received a malicious token to target their assets, under the false impression of a $UNI airdrop based on their LP

Activity started about 2 hours ago0xcf39b7793512f03f2893c16459fd72e65d2ed00c

cc: @Uniswap @etherscan pic.twitter.com/5W51AikFuV

— harry.eth (whg.eth) (@sniko_) July 11, 2022

At least $4.7 million worth of ETH was lost in the attack, according to a Twitter post from Binance CEO Changpeng “CZ” Zhao. However, there are also reports among the crypto community that there may be greater losses from the incursion.

Prominent Crypto Twitter user 0xSisyphus noted on Monday that a “big LP” with around 16,140 ETH, worth $17.5 million, may also have fallen victim to a phishing.

has big vinyl been phished?https://t.co/3n6oruM8Hj

NFT v3 in 0x09b5 all come from this wallet which contains 16,000 ETH ($18 million)

— Sisyphus (@0xSisyphus) July 11, 2022 How it works...