A fake crypto application impersonating the official Hyperliquid trading platform has been discovered on Google Play Store, posing a major security threat to crypto investors worldwide. The app mimicked Hyperliquid’s authentic logo, interface, and design so convincingly that users easily fell for the scam.
Blockchain investigator ZachXBT first raised the alarm on Telegram, warning users to avoid downloading the fake app. “Community Alert: Be careful of a fake Hyperliquid app on the Google Play Store. None of these platforms seem to do a good job of filtering these scams out,” he wrote.
The fraudulent app reportedly asked users to input their 12-word wallet recovery phrase. Once entered, scammers gained full control of victims’ wallets, transferring all crypto assets to their own addresses. One such address linked to the fake app is 0x8c12C21C394D9174c3b1a086A97d2C5523ABb8F5.
Security analysts claim that Google’s app verification process failed to detect the scam promptly. A similar incident occurred on Apple’s App Store last month, where two users collectively lost about $28,000 after downloading a fake crypto trading app.
How to Protect Yourself from Fake Crypto Apps:
- Never share your recovery phrase or private key—no legitimate app will ever ask for it.
- Always verify the developer’s name, download count, and reviews before installation.
- Use links from the official website instead of relying on search results.
- Enable Google Play Protect and avoid granting unnecessary permissions.
- Activate two-factor authentication and store large assets in hardware (cold) wallets.
Cybersecurity experts emphasize that this case highlights the growing sophistication of crypto scams. They advise platforms like Google and Apple to strengthen their review systems and for users to remain vigilant.
The fake Hyperliquid app scam is a stark reminder that in the world of decentralized finance, personal vigilance is the first line of defense. Even trusted marketplaces like Google Play can host malicious clones. Crypto investors must cross-verify every download source—one careless click can cost an entire portfolio.
