Investor Falls Victim To $71 Million Address Poisoning Scam

As a researcher with a background in blockchain security, I find the recent $71 million address poisoning scam a stark reminder of the risks that come with participating in the crypto ecosystem. The incident underscores the importance of implementing improved safety measures to mitigate potential threats and safeguard investors’ assets.


As a security analyst, I’m deeply alarmed by the recent incident where an anonymous crypto trader suffered a significant loss of around $71 million due to an address poisoning scam. This unfortunate event has sparked considerable unease within the crypto community, highlighting the urgent need for enhanced safety protocols to mitigate such risks.

Trader Loses 1,155 WBTC To Address Poisoning AttackĀ 

Based on various sources, an unidentified individual suffered a significant loss last Friday due to a address-poisoning scheme. They unfortunately parted with 1,155 Wrapped BTC (WBTC), equivalent to around $71 million, leaving only 3% of their original wallet balance.

Maliciously misleading unsuspecting traders, poisoning in the context of cryptocurrency transactions refers to the deceitful practice whereby victims are tricked into sending their digital currencies to a fraudulent wallet. These deceptive addresses are meticulously crafted through address mining, mimicking the genuine intended address to elude suspicion.

In August 2023, Changpeng “CZ” Zhao, the ex-CEO of Binance, issued a warning about this type of scam after an attempt to swindle $20 million from one of the exchange’s users. According to CZ, these fraudsters initiate their scheme by sending insignificant transactions and inserting counterfeit addresses into the intended recipient’s transfer history.

The former Binance chief explained that this address manipulation functioned by exploiting the fact that most wallet interfaces display only the initial and final segments of an address, concealing the central portion.

As a crypto investor, I’ve been closely following the recent news about the address poisoning incident. Meir Dolev, the Founder of blockchain security firm Cyvers, has shared some insight into how the scammers managed to carry out this attack. He explained that the malicious address had identical six-character sequences at both ends compared to the original address.

I’ve analyzed the situation and found that the attackers have swapped the stolen WBTC for 22,956 ETH. This amount has since been dispersed among ten different wallets. Additionally, efforts have been made to label the scammers’ main address as “fake” or “phishing” on the Etherscan Explorer in order to prevent any potential future attacks.

Crypto Losses Fall To $53 Million In April

Based on data from cybersecurity company Immunefi’s report, approximately $50 million worth of cryptocurrencies were stolen in April 2024 through hacking incidents. The remaining $3.03 million in losses resulted from fraud and scams.

It’s worth noting that the financial losses incurred in April 2024 are substantial. However, it’s encouraging to see that they represent a 60% reduction compared to March 2024. Moreover, these losses show a significant decrease of 46% when compared to those recorded in April 2023.

As an analyst, I cannot help but emphasize the importance of remaining cautious and attentive in the face of the latest address poisoning attack. Simultaneously, it is crucial that we continue to advance and improve blockchain network security through innovative means.

Investor Falls Victim To $71 Million Address Poisoning ScamTotal crypto market valued at $2.261 trillion on the daily chart | Source: TOTAL chart on Tradingview.com

Read More

2024-05-04 14:41