According to Token Terminal statistics, decentralized finance (DeFi) protocol Aave made a giant announcement on August 7, 2025: it had more than $60 billion in net deposits across 14 networks. This was three times as much as the $18 billion it had in August 2024.
But the euphoria didn’t last long because blockchain security company PeckShield said that Aave users were the subject of a phishing attempt just one day later. Scammers used Google Ads to spread fake links that looked like real Aave investing sites. These practices put investors who were unaware of the situation at risk of losing their cryptocurrency.
The phishing campaign uses Google Ads to spread bogus Aave websites, like “aaxe.com.” When users click on these bad links, they are taken to a fake platform where they are asked to connect their crypto wallets. Once connected, scammers can access the wallet’s funds and typically steal the entire amount. Blockchain-based scams commonly involve irreversible transactions.
There haven’t been any reports of losses yet, but the fact that Google Ads are so widely used suggests that the attack might have a significant effect. This method is similar to other scams, such as one in September 2024, when scammers used Google Ads to pretend to be Revoke Cash. This business helps people recover their lost cryptocurrency.
Aave’s $60 billion deposit milestone shows how strong it is in the DeFi space. The protocol has stayed strong even if the market has been rough lately. For example, the price dropped to $232.6 in June 2025 after two whales sold $5.5 million worth of AAVE tokens.
AAVE was worth $271.31 at the time of the report, which was a 5.98% increase in 24 hours. The company’s market cap was $4.15 billion. This rise shows that Aave is popular with investors, but it also makes it a potential target for hackers who want to take advantage of its popularity.
The Aave phishing attack shows how important it is to be extra careful in the crypto world. Before connecting wallets, users should check the URLs of websites to make sure they match Aave’s official domain.
Blockchain security experts advise users to immediately disconnect their wallets from suspicious websites and avoid using compromised wallets in the future, as criminals often monitor them for potential funds.
Furthermore, users need to stay away from links in commercials, emails, or social media that they didn’t ask for. There have been $4.6 billion in scam-related losses in the crypto business in 2024. AI-enabled fraud is responsible for 40% of high-value thefts, which shows how these attacks are getting more complex.
The Aave team is aware of the phishing attempts as the company works to solve this security issue, but there has been no formal response yet. The event shows that DeFi is still risky, since its rapid expansion draws both investors and crooks. Aave can stay at the top of the DeFi world and protect its community by prioritizing user education and strong security.
