A fake Uniswap website promoted through Google ads has already drained roughly $400,000 from users. The scam works by pushing phishing links above the real website in Google search results, tricking users into connecting their wallets and signing malicious transactions.
Crypto Fraudsters have been scamming and taking advantage of the America people for too long.
No more! This FBI will find you, and we will bring you to justice!
-DKP🇺🇸
If you’ve been a victim of a crypto scam or exploit, @IRONCLADFORENS can assist with blockchain tracing, forensic analysis, and assistance in getting back your assets.
Stay safe and share this so more people don’t get drained.
https://t.co/0GJ2S6z71X
An attacker discovered a flaw in Aztec Connect’s public rollup processing function and exploited it to drain the remaining funds. Before the attack, the wallet was funded through Tornado Cash. Aztec Labs closed Aztec Connect in 2023 and gave users over a year to withdraw their
funds. In 2024, the team removed admin control entirely, making the contracts immutable and impossible to upgrade or pause. But more than $2.1 million in assets remained locked in the old contracts.
The exploit drained:
909 ETH
270,000 DAI
167 wstETH
Other assets
Total losses exceeded $2.1 million.
Importantly, no current users were affected. The stolen funds had been left behind in abandoned contracts after the shutdown.
Chirag Tomar allegedly ran a phishing scam targeting users of Coinbase Pro under Coinbase. He registered a lookalike domain (https://t.co/NJz26uzPS2) and used SEO tricks so it ranked high in Google. Victims landed on a fake login page, entered email/password + 2FA,
and saw a fake loading screen while attackers immediately drained their crypto. 500+ victims were reported, and their wallets were drained after login credentials were stolen. The stolen funds were moved across multiple wallets and exchanges to obscure tracking,
then converted into luxury assets such as cars, watches, travel, and real estate. He was caught through blockchain tracing, where investigators followed the stolen crypto across on-chain transactions. Exchange KYC checks helped link cash-outs to verified identities.
Domain and hosting records connected the phishing infrastructure to the operator, while financial trails from luxury spending and asset purchases further strengthened the case. He was ultimately arrested at Atlanta airport in December 2023.
If you have been a victim of this or your crypto assets have been stolen in a scam, you can contact @IRONCLADFORENS for assistance in tracing and recovering your crypto assets
https://t.co/0GJ2S6z71X
#PeckShieldAlert The @UXLINKofficial exploiter-labeled address has swapped ~14.6M $DAI for 8,298.6 $ETH.
The exploiter then deposited 8,340 $ETH into #TornadoCash and bridged 2.64 $ETH ($4.63K) from #Ethereum to #BTC address bc1pv8...yc5q.
The exploiter currently holds 10.54M $DAI.
A cryptocurrency user reportedly lost approximately $2,314 after visiting a fake Ledger Live website on Google. The phishing page impersonated the official Ledger Live application and prompted the victim to verify their wallet. Shortly afterward, unauthorized transactions drained
assets across multiple blockchains, including BabyDoge, Dogecoin, and SUI. The funds were transferred to the following addresses:
BNB Chain: 0xA9bf9b97612B779da290DA257Cba2A0376a8cC8
Dogecoin: D8Eb2tSCgSuX5WqeswYHi74MexJJ98Edf7
This incident reflects a phishing campaigns that use fake wallet profiles, Google Sites pages, and misleading search results to steal cryptocurrency. Similar scams have previously targeted users of major platforms such as Uniswap, resulting in significant financial losses.
Be careful when accessing DeFi platforms. Always verify links through official X accounts and check protocols with @IRONCLADFORENS before connecting your wallet. Never trust the first sponsored result on Google simply because it appears at the top of the search results.
If you were affected by this scam, you can also reach out to @IRONCLADFORENS for forensic tracing and possible recovery assistance related to stolen funds.
Stay safe and share this so more people don’t get drained.
https://t.co/0GJ2S6z71X
@dustinwood A sweepbot signed a transaction which gave approval for malicious contract that drain your wallet. You will need to revoke approval. Hopefully you still have the transaction details, Kindly follow and send us a text, we can assist you.