See more like this on Google
Share article
Share article
The warning landed in a recent post on X, where Adams argued that fraudulent ads and impersonation apps keep resurfacing even after years of reports and takedown requests, and despite Uniswap's own attempts to get official channels approved. [2]
Enjoy articles without ads?
Register for free and get unlimited access to all articles.
A "top search result" that allegedly wiped a portfolio
Adams highlighted a case where a victim reportedly clicked what appeared to be a legitimate Uniswap result near the top of search. According to his post, the link was a spoof that masqueraded as Uniswap and led to a complete loss of funds, with the victim describing the damage as "lost everything." Adams summarized the size as a "mid six figure" portfolio. [3]
That detail matters because it frames the scam as something beyond the usual dusting or small wallet nick. These are the kinds of hits that come from wallet draining flows: fake front ends that prompt users to connect, sign, and approve transactions that look routine but are structured to move assets out.
Adams' broader point was blunt: the ad and app ecosystems that distribute these scams often respond slowly, and the same patterns return even after takedowns.
Adams' broader complaint: scammers ship faster than legit teams
One of the more telling lines from Adams' post was his frustration that scam Uniswap apps were circulating while Uniswap Labs was still waiting months for App Store approval. That is not just a PR annoyance. It creates a predictable user funnel: [4]
- users search "Uniswap app" or "Uniswap" on mobile
- the store shows something that looks official (logo, name, screenshots)
- users assume "if it's in the store, it's vetted"
- wallet connect or seed phrase prompts do the rest
Even without a seed phrase request, a malicious app can push users toward signing approvals that grant broad token spending permissions. Once a spender is approved, the attacker can drain balances later without the victim clicking anything else.
Why fake Uniswap ads are so effective (and why they keep printing)
This is not a Uniswap specific vulnerability. It is a distribution problem.
Scam ads work because they exploit trust shortcuts most people use online:
1) "Top result" bias is real
Sponsored placements sit above organic links. Plenty of users read that as "most relevant" or "most official," especially during a time sensitive swap.
2) Visual mimicry is cheap
A convincing clone requires minimal effort: a similar domain, copied UI, and a few prompts that replicate the normal swap flow. Most users do not inspect the URL character by character when gas is moving and a trade is on.
3) Wallet UX makes signing feel normal
DeFi trains users to sign transactions. That is the whole game. Attackers lean into that muscle memory, presenting approvals that look like standard ERC-20 flows. The user experience often does not clearly convey the full implications of what is being authorized.
4) A single approval can be a delayed rug
The most painful drains are not always immediate. If a victim approves a malicious spender for a high limit, the attacker can wait and sweep later, which complicates user forensics and can make the initial click feel less obviously linked to the loss.
The backdrop: crypto scam losses are ticking up again
Adams' warning also landed as scam activity remains elevated across the market. The Cointelegraph report noted that January saw the highest amount of money stolen in crypto scams in 11 months, a reminder that retail-facing attack surfaces are still wide open. [5]
That context matters for Uniswap because Uniswap is not just a brand, it is a verb. Users "go to Uniswap" the same way they "Google" something. That makes it a prime target for impersonation, especially during volatile weeks when swap volume spikes and users are less careful.
Who benefits from this mess?
The uncomfortable answer is that scammers benefit from the same growth loops everyone else does:
- more new users onboarding directly into self-custody
- more mobile-first DeFi usage
- more paid acquisition channels (ads) used to find legit products
- more confusion between protocol, interface, and third-party front ends
Attackers do not need to compromise Uniswap's smart contracts to profit. They only need a victim to land on the wrong page or install the wrong app.
Meanwhile, platforms that sell ads or host apps face a whack-a-mole problem at scale. Ads rotate quickly, domains churn, and enforcement is inconsistent across regions and languages. Adams' core critique is that "years of reporting" has not produced a durable fix. [6]
Practical takeaways for users (the unsexy checklist that saves bags)
No checklist is perfect, but the following reduces risk significantly:
Bookmark the real URL and stop searching for it
If you use Uniswap's web app, bookmark the official site and only use that bookmark. Search is where most of these stories start.
Treat "sponsored" as "untrusted by default"
A top placement is not an endorsement. It is an auction.
Never enter a seed phrase to "connect"
A legit dApp does not need your seed phrase. If any site or app asks for it, that is game over.
Watch approvals like a hawk
Before signing, read what you are approving and for which token. Unlimited approvals are common in DeFi, but they are also a favorite attack vector. If something feels off, reject and disconnect.
Use a hardware wallet or a segmented wallet setup
Keeping a "hot" wallet for daily swaps and a separate cold wallet for long-term holds limits blast radius. A mid-six-figure wallet should not be clicking random links.
Revoke suspicious approvals
If you suspect you signed something malicious, revoke token allowances quickly. Speed matters.
What would actually change the situation?
Adams' post reads like a founder hitting a wall with traditional gatekeepers. A real improvement likely requires some combination of:
- stricter advertiser verification for crypto brand keywords
- faster takedown workflows for reported phishing domains and copycat apps
- clearer in-wallet warnings for risky approvals and known drainer patterns
- more aggressive brand protection across app stores (especially around lookalike names and logos)
None of that is trivial, but "this keeps happening" is not a neutral outcome, it is a cost paid by users.
Bottom line
Adams is not claiming Uniswap itself was hacked. The story is about distribution: fake ads and impersonation that can sit in front of the real product, long enough to wipe a wallet. The alleged loss he cited, a "mid six figure" portfolio, is a reminder that even experienced users can get clipped when the phishing looks clean and the placement looks official.
Risk stays high as long as search and app marketplaces remain porous. The thesis that this improves meaningfully only holds if the big platforms tighten verification and speed up enforcement. Until then, the best defense is boring discipline: bookmark the real site, distrust ads, and never sign or approve anything you do not fully understand.
