Thread by @Uniswap

1/ Yesterday, some Uniswap LPs unfortunately fell for a phishing scam, a problem far too common in crypto today. To be clear: there was no exploit. The Protocol always was — and remains — secure. Here’s what happened.👇

2/ A phisher airdropped malicious tokens to Uniswap LPs’ wallets. The name of the token directed users to a malicious interface that claimed the users could swap these tokens for UNI.

3/ This generated a setApprovalForAll transaction, which, if approved by the user in their wallet, gave the attacker the ability to redeem all of the user’s Uniswap v3 LP tokens for their full underlying value.

4/ This is a good reminder for wallets and other interfaces to be vigilant about hiding spam and tokens with URLs in their name.

5/ Protect yourself from phishing by checking domain names. We operate primarily under the domain uniswap.org. Airdrops that direct you to unofficial domains are likely phishing attempts. We will never airdrop users without notice on multiple official channels.

6/ Attacks like this can happen at any time on any platform, and we encourage you to stay vigilant while interacting with any contract.

7/ If you see something suspicious, please reach out to [e-mail] for help. And for official information about the protocol and to get updates from the community, join us in Discord:
discord.com/invite/FCfyBSb…