A user lost $1.23 million in crypto assets after falling victim to a phishing attack. The incident occurred when the user searched for 'Aave' on Google and clicked on a malicious link, leading to a phishing site. The attackers exploited Uniswap's multicall mechanism to authorize the user's LP NFT to a phishing contract address, 0x000002BDD8102702350afEd10dc918Aa6D300000. Subsequently, the attackers transferred the corresponding funds, totaling $491,239 in USDe and $744,997 in USDT, from the user's account.