Crypto Influencer Loses $24 Million in Address-Poisoning Scam

A recent high-profile attack on a crypto influencer highlights the increasing sophistication and frequency of address-poisoning scams. Address-poisoning attacks involve scammers creating fake wallet addresses that mimic those used by legitimate parties, such as exchanges or trading partners.

The attackers send small 'dust' transactions to the victim's wallet from the fake address, which is then inserted into their transaction history. When the victim attempts to send funds and copies an address from previous transactions, they may accidentally select the poisoned address instead of the real one. The funds then go directly to the attacker.

Security experts recommend several basic precautions to prevent such attacks, including verifying the entire address before sending funds, using saved address books or QR codes, and enabling withdrawal whitelists and address books in wallets and exchanges.