Aave hit by phishing attack day after reaching $60B in net deposits

Soon after decentralized liquidity protocol Aave announced it had surpassed $60 billion in net deposits, scammers launched a phishing campaign targeting its users through Google Ads, according to security researchers.

On Wednesday, Aave said that it had become the first decentralized finance (DeFi) protocol to accumulate $60 billion in net deposits across 14 networks. According to Token Terminal data, Aave’s net deposits more than tripled in the past year from around $18 billion in August 2024.

A day later, on Aug. 7, blockchain investigation firm Peckshield alerted the crypto community about an ongoing phishing attack targeting Aave (AAVE) investors. Crypto scammers have posted phishing links to fake Aave investment platforms via the Google Ads service.

Net deposits in Aave across all chains. Source: Token Terminal

Phishing scam spreads via ads

Once an unsuspecting crypto investor clicks on such links, the website will prompt users to link their crypto wallets with its services.

Source: Peckshield

Linking a wallet address to the phishing website will allow the scammers to access and transfer all funds stored in the wallet. Such transactions are often irreversible and may result in permanent loss of funds.

While losses from the ongoing attack have not been confirmed, the reach of the phishing attempt is high, as it is being propagated through Google Ads services.

Related: Aave proposal to launch centralized lending on Kraken’s Ink moves to next phase

Preventing loss of funds in phishing scams

Phishing scams trick users into revealing sensitive information, such as private keys, seed phrases or login credentials, by impersonating trusted or known services.

As a result, investors are advised to double-check the website URLs before interacting with the service, which includes depositing funds and linking wallets. However, in case of a compromise, investors should take specific steps to help minimize the damage.

Crypto investors should immediately attempt to transfer funds from the compromised wallet to a secure one. One must also reach out to their service provider through official channels and revoke any wallet approvals through services like Revoke.cash.

Additionally, compromised wallets should never be reused to store or deposit funds, as scammers would typically monitor the wallets and try to cash out any remaining funds. Moreover, users should try to disconnect their wallet from the phishing website.

Cointelegraph contacted Aave for comment and alerted them about the ongoing phishing attempts.

Magazine: How Ethereum treasury companies could spark ‘DeFi Summer 2.0’