Uniswap (Phishing Attack)

On July 11, 2022, a phishing campaign targeted Uniswap users by airdropping a malicious ERC20 token to 73,399 UNI holders, promising a $2K airdrop. When users interacted with the token to claim it, they signed malicious approvals granting the attacker access to their Uniswap V3 LP tokens.

The attacker siphoned 7,574 ETH (~$8M) and moved 7,500 ETH through Tornado Cash.