According to CoinMeta, a Hyperliquid user lost approximately $550,000 due to fake advertisements sponsored by Google. The investigation revealed that these advertisements directed victims to a counterfeit decentralized trading platform, and the related infrastructure was connected to the Inferno Drainer ecosystem. Blockchain security company Salus pointed out in a post on August 24th that the theft occurred on August 13th and involved counterfeit Hyperliquid websites promoted through paid Google search results. Salus stated that after tracing the stolen funds and examining the infrastructure behind the pages, it was confirmed that the operation was associated with a professional “pump-and-dump” network. This service recruited customers through Telegram accounts and provided tools such as malicious scripts, management panels, and one-time contract deployment. Salus also noted that the theft involved multiple addresses, and the distribution of the funds was automatically handled by the infrastructure. Google subsequently suspended the advertisers associated with this advertising campaign.