Lost my ETH after connecting to a fake 'Uniswap clone' site on Base network, wallet drained. Any hope?

asked 19d ago14 views10 answers
0

Hey everyone, feeling pretty stupid right now. I was trying to bridge some ETH to the Base network for better yields I saw advertised on Twitter, I clicked what I thought was a legitimate Uniswap link (it looked identical, but the URL was slightly off, like app.unlswap.org or something subtle like that, I only noticed later). My MetaMask was connected, and I tried to approve a transaction for a small amount of ETH. Next thing I know, my entire wallet, about 3.5 ETH, was drained in minutes. It happened late last night, around 2 AM here in Berlin.

I checked Etherscan and saw the transactions going out, they went to some fresh wallet addresses. I've disconnected everything and reported it to MetaMask, but they said they can't reverse transactions. Is there *anything* at all that can be done? I'm just gutted, that was a significant chunk of my savings.

Mentioned in this discussion
Etherscan· neutral
#wallet-drainer#uniswap-scam#base-network#ethereum#phishingasked by Stefan Richter · Berlin, Germany

10 Answers

47

Ugh, this is rough, Stefan. So sorry to hear this happened. What you're describing is a classic phishing attack combined with a wallet drainer script embedded on a fake dApp. The slightly off URL is always the biggest red flag, but easy to miss in the moment, especially when you're tired or stressed. The unfortunate reality about these types of scams, especially when they involve direct wallet approval and fund transfers to new attacker-controlled addresses, is that recovery is exceedingly difficult, often impossible.

Once those ETH tokens leave your wallet after you've approved the transaction, they're irrevocably on the blockchain, owned by the new address. Unless the scammer makes a mistake and moves them to a centralized exchange where they can be identified and potentially frozen (which is rare for a sophisticated drainer), or if they send them to a wallet that gets flagged by a blockchain analytics firm like ChainAbuse and reported to law enforcement, your options are limited.

What you've already done—disconnecting, reporting to MetaMask—is correct. You *could* try reporting it to the FBI IC3 if you're in the US, or your local law enforcement, but honestly, for these types of crypto losses, especially cross-border ones, their chances of recovery are slim to none. It's a painful lesson learned, but moving forward, always double-check URLs, bookmark legitimate sites, and maybe use a hardware wallet for significant sums. And never approve transactions without understanding exactly what you're signing.

Mia Brown · Melbourne, Australiaanswered 19d ago
21

Oh no, Stefan, I'm so sorry this happened to you. It's truly heartbreaking to lose your hard-earned money like that. Don't beat yourself up too much, these scammers are getting incredibly sophisticated with their fake sites. It could happen to anyone, especially when you're looking for opportunities and things seem legitimate. I know it doesn't help with the money, but try to be kind to yourself. Perhaps report it to your local police too, just in case, even if the chances are slim. Sending you strength from Dubai.

Layla Al Mansoori · Dubai, UAEanswered 19d ago
35

This sucks, Stefan. I've heard too many stories like this. The 'slightly off URL' is the oldest trick in the book, yet still catches so many people because these fake sites are visually perfect copies. This is why you HAVE to be super careful with your links. Always, always verify the domain name letter by letter, or better yet, just use official links from trusted sources or your own bookmarks. Don't rely on links from random tweets or even DMs. Your funds are likely gone, I'm afraid. These drainers are designed to sweep everything immediately to mixer addresses or new wallets. It's a sad reality in crypto.

Isla Jones · Adelaide, Australiaanswered 19d ago
12

aiyoh, this is terrible. i also lost money once to a fake website, not a uniswap one but a fake exchange impersonator. it looked exactly like the real thing, even the login page. i put in my details and boom, account emptied. it's so easy to miss those tiny details when you're not expecting it. my friend told me to always check the security certificate too, not just the URL. but tbh, when they're so good, it's hard. so frustrating that these people get away with it.

Hui Chan · Singapore, Singaporeanswered 18d ago
29

Stefan, I'm really sorry to hear about your loss. It's a horrible feeling, that sudden gut punch. I almost fell for a similar trick a few months back, a fake Etherscan link that was just one letter off. Luckily, my partner was looking over my shoulder and pointed it out before I connected my wallet. It's so easy to get caught when you're rushing or distracted. The best defense is really extreme vigilance with URLs and never, ever clicking links from unknown sources. Bookmark everything important. For now, try to accept it as a hard lesson. Maybe review your other security practices too, like using a hardware wallet or multi-factor authentication everywhere.

Mei Koh · Singapore, Singaporeanswered 18d ago
18

Man, that's rough. And on Base network too, which means transactions are fast and cheap, great for scammers to move funds quickly after draining. Honestly, once it's gone and you approved it, it's pretty much gone. The blockchain is designed for immutability; that's its strength and its biggest weakness when it comes to scams. Unless it goes to an exchange that can intervene, chances are basically zero. Don't bother with these 'crypto recovery' services that suddenly pop up in your DMs, they're 100% scams of the second order. They'll just take more of your money with promises they can't keep. Better to write it off as a very, very expensive lesson.

Hao Teo · Singapore, Singaporeanswered 18d ago
10

Ugh, another one. It's always the 'slightly off URL' that gets folks. And the fact that it happens so fast, you barely have time to react. I think the key here is not just checking the URL but taking a second and thinking, 'Does this feel right?' especially when connecting your wallet. If you're tired, if you're stressed, that's often when scammers strike best. It sounds like a direct wallet drain, which means your ETH is probably long gone. Law enforcement might open a file but unless it's a huge amount tied to a bigger operation, don't expect much. Focus on securing your remaining assets.

Anna Bakker · The Hague, Netherlandsanswered 18d ago
31

Stefan, I'm really sorry to hear this. The cold hard truth is, this is an all too common scam, and the funds are most likely gone forever. These wallet drainers are incredibly efficient. The moment you approved that transaction, it gave the scammer permission to clear out your wallet. Once crypto is moved on-chain, it's like cash disappearing into thin air from your pocket – impossible to get back directly. Be incredibly wary of anyone contacting you now, claiming they can 'recover' your funds. These are almost always follow-up scams targeting victims. They'll ask for an upfront fee or 'gas money' and then disappear with that too.

Michael Anderson · New York, USAanswered 18d ago
7

this happened to my cousin last year with a fake defi site. same thing, connected metamask and within seconds everything was gone. it was a huge shock to him. he reported it to the police here in singapore and to ic3 but nothing came of it. they just said impossible to trace. he was super careful after that. it's really painful but sometimes life gives you these tough lessons. hope you find some peace about it.

Hao Koh · Singapore, Singaporeanswered 18d ago
14

Eish, Stefan, that's really terrible. Losing your savings like that is a massive blow. Don't beat yourself up though, these guys are pros at making things look legit. That 'unlswap' URL is a classic trick, banking on you not noticing the minor change. Unfortunately, as others have said, once you've approved the transaction and the ETH is moved, it's almost impossible to retrieve, especially since it's on a decentralised network like Base. The best you can do is take this as a very harsh, very expensive lesson. Use this experience to educate others and maybe get a hardware wallet for future investments. Stay safe, bru.

Daniel Naidoo · East London, South Africaanswered 17d ago

Your answer

You'll be asked to sign in to post.