@lookonchain: Victim lost $50M in address poisoning attack after test transfer

Submit
@lookonchain
@lookonchain

A victim (0xcB80) lost $50M due to a copy-paste address mistake. Before transferring 50M $USDT, the victim sent 50 $USDT as a test to his own address 0xbaf4b1aF...B6495F8b5. The scammer immediately spoofed a wallet with the same first and last 4 characters and performed an address poisoning attack. Since many wallets hide the middle part of the address with "..." to make the UI look better. Many users often copy the address from transaction histories, and usually only check the starting and ending letters. This victim likes to do the same. When transferring the remaining 49,999,950 $USDT, the victim copied the fake address from his transaction history. As a result, 49,999,950 $USDT was sent straight to the scammer. A painful lesson! Always double-check the address before making a transfer. Don't copy addresses from your transaction history for convenience. Source:

Specter (@SpecterAnalyst)

Victim lost $50M to address poisoning Swapped for $ETH and transferred to two wallet I'm really speechless wtf Victim: 0xcB80784ef74C98A89b6Ab8D96ebE890859600819 Theft: 0xBaFF2F13638C04B10F8119760B2D2aE86b08f8b5 0xBcb94F7609973E5ea7d2CbeDAf0C5518b911e6cb 0x7A1bEe3d53BF70861e…

Tweet image
xcancel.com

Victim lost $50M in address poisoning attack after test transfer

submitted bymisha13,28711mo
3
Read original article
AI summary of the linked article

A victim lost $50 million in USDT to an address poisoning attack after copying a fake address from their transaction history. The victim, identified only as 0xcB80, first sent 50 USDT as a test to their own address, 0xbaf4b1aF...B6495F8b5. The scammer then created a wallet with the same first and last four characters, and the victim sent the remaining 49,999,950 USDT to that fake address. The article notes that many wallets hide the middle of addresses with "...", so users often check only the start and end.

Recommended by 4 curators
thatalexpalmer.ethmacbudkowski.eth@disky.eth@tum4y.eth
3 comments
avatar
mishaSubmitter· 11 months ago
One of the oldest tricks in the book. I might agree w/ one of the comments:

showing "..." is a mistake
avatar
macbudkowski.eth· 11 months ago
Wondering why someone sending that much money hasn't added a new address to their wallet address book. Shouldn't it be safer to just use your own wallet address book, so that someone would have to compromise the wallet app which is harder than spoofing addresses?
avatar
tim· 11 months ago
Wondering why someone sending that much money hasn't added a new address to their wallet address book.

My theory inevitably has to be that they do not deserve to have this much money because they don't know it's value. So it's incompetency.

I think it's all too easy to be in a position where your parents inherited you a crazy amount of wealth and then you fumble 50M because you think that's a reasonable amount to gamble. Am I crazy?

Like what I'm saying is that's just in relation to how much we own. Maybe I'll fumble 5000 EUR once, and a person who's like 10000x more wealthy fumbles 50M?
Top stories that week →