Google Ad Phishing Drains $550,000 From Hyperliquid User

Hyperliquid is a decentralized crypto trading platform best known for perpetual futures, where users retain control of their wallets and authorize transactions on-chain. That model makes phishing especially damaging: scammers can buy Google search ads that mimic official links, send users to cloned interfaces and trick them into approving malicious transactions. Because blockchain transfers are generally irreversible, a single mistaken signature can allow an attacker to drain a wallet before the victim can intervene.

In the latest case, a Hyperliquid user lost about $550,000 after clicking a malicious Google advertisement, according to a security specialist. The nonprofit Security Alliance, known as SEAL, said on April 21 that such campaigns had surged in March 2026 and that it blocked more than 356 malicious advertising URLs within several weeks. SEAL’s published intelligence covered URLs created between March 13 and March 30, underscoring the scale and persistence of attacks targeting major DeFi and crypto trading brands.