Google ad phishing scam drains $550,000 from Hyperliquid user, security specialist says

What happened

A Hyperliquid user lost $550,000 after clicking a phishing link that appeared as a Google advertisement; a security specialist said the scam used fake Google ads, and SEAL reported blocking 356 malicious Google ad URLs in April.

Confirmed

Global impact / market context

The incident shows how scammers can exploit trusted platforms like Google to steal large crypto amounts, meaning investors must verify ad sources and protect wallets; it also pressures exchanges and ad networks to improve safeguards against such fraud.

Analyst inference

Phishing attacks have been common in the cryptocurrency sector, and this high‑value theft adds to growing concerns about online‑ad fraud; regulators and platforms are increasingly scrutinizing ad ecosystems, while exchanges seek stronger user‑protection tools to limit losses.

Analyst inference

What to watch

1. Monitor for new phishing campaigns that mimic Google ads targeting crypto traders, as attackers may replicate the method after this successful $550,000 theft. Analyst inference
2. Watch Google’s response, including any takedown policies or ad‑review changes, because stricter enforcement could lower the number of malicious ad URLs reaching users. Analyst inference
3. Follow SEAL’s weekly reports on blocked malicious Google ads, as a rise in blocked URLs may signal increasing phishing activity targeting crypto platforms. Analyst inference

Affected assets

• HYPE — Hyperliquid

Evidence

• theblock.co