The attack is web3 phinshing. Always check you're on the correct project page and buy with the contract code from the legitimate project website.