Misspelled lookalike lihgter-dex.xyz impersonates Lighter DEX trading platform with wallet drainer
MalwareTips reports a fake Lighter trading platform scam using the misspelled website lihgter-dex.xyz (the g and h are swapped) to impersonate the genuine Lighter decentralized exchange. The page imitates a trading te…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips reports a fake Lighter trading platform scam using the misspelled website lihgter-dex.xyz (the g and h are swapped) to impersonate the genuine Lighter decentralized exchange. The page imitates a trading terminal, solicits wallet activity and was described as using a drainer. MalwareTips notes Lighter's own documentation lists app.lighter.xyz as an official address; the real Lighter is not accused. No funded wallet, signature or deposit was used to test the imitation.
How the scam works
Wallet-drainer lures copy a familiar crypto brand and offer something free: a vote reward, an airdrop, an early-supporter allocation or a trading bonus. The visitor is directed to a 'Connect Wallet' button. Connecting alone usually only shares a public address, but the next prompts can ask for a signature, a token approval or a transfer, and these may be labelled as a claim or vote. An approval or signed permission can let the operator move tokens later without asking again, and blockchain transfers are rarely reversible.
MalwareTips says the right response depends on what was actually approved. Someone who only viewed the page has less to do than someone who signed a transaction or typed a recovery phrase. Check your wallet history or a blockchain explorer, revoke any token permissions you don't recognise, and if a recovery phrase was entered, move the remaining funds to a new wallet. Find claims and events only through a project's official website and verified accounts.
Typosquats like 'lihgter' are easy to miss when typing quickly or clicking a search ad; Lighter's documentation lists app.lighter.xyz. Lighter is impersonated and is not involved.
Source
MalwareTips, "Fake Lighter Trading Platform Scam" (published 25 October 2026).
Red flags
- A reward, airdrop or event page on lihgter-dex.xyz rather than Lighter's official site.
- A 'Connect Wallet' button as the first step to claim.
- Signature or approval requests that don't clearly match a simple claim.
- Requests for a recovery phrase or private key.
- Urgency, countdowns or limited allocations.
If you were targeted
- 1Don't connect a wallet to lihgter-dex.xyz or sign anything there.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.