Crypto User Loses $50,000 in Address-Poisoning Scam

Address poisoning relies on the human tendency to rely on transaction history rather than verifying full alphanumeric strings. Attackers monitor blockchain activity to identify frequent transfers, then generate lookalike addresses that appear in the victim’s wallet logs. By sending a negligible amount of tokens, the fraudster ensures their malicious address occupies a spot in the user's recent activity, waiting for the sender to inadvertently copy it during a future transaction.

This method mirrors previous high-profile thefts, including an August incident where a user lost 100,000 USDT after selecting a planted address that had remained in their history for 66 days. In another case, a trader lost nearly 50 million USDT after a dust transaction obscured the correct destination. Security experts warn that while wallets like MetaMask now implement warnings for addresses that resemble previous contacts, the risk remains high. Industry leaders, including Binance co-founder Changpeng Zhao, have urged blockchain explorers to adopt better filtering for zero-value transactions, noting that automated spam often clutters interfaces and lures users into these traps. Ledger advises users to hide suspicious assets and manually save verified destinations in a secure contact list to avoid becoming the next target.