Phishing Site Imitating Uniswap Drains $400,000 From Wallets

An on-chain investigator known as b-block posted on X that a phishing website impersonating the Uniswap interface siphoned roughly $400,000 from multiple cryptocurrency wallets.

B-block flagged two Ethereum addresses tied to the theft: 0x37925684BA178821b4436E06e67f5dBD6cfA49Bb and 0x2fC25F46cC49D226eF92E9A7665f3d2821F3c5E2.

The scam used a fake front-end that replicated Uniswap’s layout. Attackers commonly register domains with similar names and buy search ads, then prompt users to approve transactions that grant permission to transfer tokens. Once approvals are signed, connected wallets can be drained.

Uniswap co-founder Hayden Adams criticized the recurring scams in February, writing, “These scams are horrible, we’ve been fighting them for years.” He added that fraudulent apps circulated while Uniswap awaited App Store approval and that scam advertisements continued to reappear despite reporting.

Federal data show crypto fraud remains significant. The FBI’s 2025 Internet Crime Report recorded 181,565 cryptocurrency-related complaints totaling $11.36 billion in losses, a 22% increase from 2024, and placed the average loss per crypto fraud victim at $62,604. Complaints tied to crypto-related phishing and spoofing numbered 7,164, with reported losses above $111 million. A blockchain security firm reported that signature phishing attacks alone siphoned $6.27 million from wallets in the first month of the year.

Security firms recommend revoking unused token approvals, verifying that users are on the correct domain before signing transactions, and avoiding sponsored search results that can lead to lookalike sites. B-block advised that traders use only official links provided by projects or trusted sources.

Fake user interfaces and lookalike domains remain among the most common phishing vectors in decentralized finance.