According to CoinMeta, a Hyperliquid user lost approximately $550,000 on August 13 due to interacting with a phishing website promoted through Google search ads. Darcy, co-founder of Flashrescue, indicated that the three addresses controlled by the attackers were 0x98b276…13c55, 0x93b6b2…d6d1, and 0x6fe314…b566. On-chain data shows that about 550,019 USDC were allocated to these three addresses. Google has suspended advertisers associated with this advertising campaign and stated that it has a "zero-tolerance" policy towards fraudulent activities.