Attackers took advantage of the hype around the launch of the Unichain second-level solution by the decentralized exchange Uniswap. They created a fake Unichain website in an attempt to steal crypto assets.

Fraudsters began promoting the fake website unlchalindefi[.]com, which was designed to resemble the original platform in appearance. However, the scammers replaced the “Get Started” button with “Connect” and removed the “Read Documents” inscription, replacing it with the “Bridge” option, thereby encouraging users to link their wallets.

The scammers then bought advertising space on Google, pushing the fake website to the top of search results. The ad showed a URL to the real Unichain website, but when clicking on the link, users were redirected to a fake service.

After clicking on the “Connect” button, the site requested a connection to the wallet. However, immediately after approval, the service began sending spam with requests to confirm the transaction. When connected using the MetaMask wallet, each transaction contained a warning from Blockaid about a deceptive request: “If the request is approved, a third party may take all your crypto assets.”

The fake website has now been closed. Apparently the hosting service discovered the scam and decided to stop supporting the site. Google has also removed ads for this platform. Considering that the fraud was promptly stopped, the scammers may not have had time to empty the wallets of users.

Let us recall that on October 10, Uniswap Labs announced the launch of the Unichain solution, which should reduce costs, speed up transactions and increase liquidity across networks. The developers have promised to launch the mainnet for Unichain later this year. Only the testnet immediately appeared, which the scammers took advantage of.

Recently, a malicious WalletConnect application similar to the real protocol was discovered in the Google Play store. User losses amounted to about $70,000.