Safe

Havoc

Million

Security

<p>The post <a href="https://coinpedia.org/news/5-million-lost-to-address-poisoning-safe-wallet-users-targeted-by-crypto-hacker/">$5 Million Lost to Address Poisoning: Safe Wallet Users Targeted by Crypto Hacker</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>In a sophisticated cyber attack spanning from November 26 to December 3, a skilled hacker specializing in ‘Address Poisoning’ has siphoned off an estimated $2.05 million from nearly 10 users of Safe Wallet, a popular cryptocurrency storage service. This revelation comes from Scam Sniffer, a leading Web3 fraud detection platform, which has been closely monitoring the situation.</p> 
<h2 class="wp-block-heading" id="h-a-trail-of-financial-havoc"><strong>A Trail of Financial Havoc</strong></h2> 
<p>Further examination of data from Dune Analytics by Scam Sniffer sheds light on the broader impact of this cybercriminal’s activities. Over the past four months, it is believed that the same attacker has amassed a total of $5 million, targeting 21 victims. In one notable instance, a user deposited $10 million in cryptocurrency into their secure wallet, only to incur a loss of $400,000 – a narrow escape considering the potential magnitude of the loss.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">about ~10 Safe wallets have lost $2.05 million to "address poisoning" attacks in the past week.<br><br>the same attacker has stolen $5 million from ~21 victims in the past four months so far. <a href="https://t.co/fu4kxaI3py">pic.twitter.com/fu4kxaI3py</a></p>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1731236292166590507?ref_src=twsrc%5Etfw">December 3, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="h-understanding-address-poisoning"><strong>Understanding Address Poisoning</strong></h2> 
<p>The method, known as ‘Address Poisoning’, involves the creation of a crypto address that closely resembles the victim’s regular transaction addresses, often matching the beginning and ending characters. The attacker then sends a small amount of cryptocurrency from this newly-created wallet to the target, thereby ‘poisoning’ their transaction history. Victims, failing to notice the subtle differences, may then mistakenly send substantial funds to the hacker’s address instead of the intended recipient.</p> 
<h2 class="wp-block-heading" id="h-a-high-profile-case-florence-finance"><strong>A High-Profile Case: Florence Finance</strong></h2> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw">#PeckShieldAlert</a> <a href="https://twitter.com/hashtag/FlorenceFinance?src=hash&amp;ref_src=twsrc%5Etfw">#FlorenceFinance</a> fell victim to a <a href="https://twitter.com/hashtag/AddressPoisoning?src=hash&amp;ref_src=twsrc%5Etfw">#AddressPoisoning</a> scam, resulting in a loss of ~$1.45M <a href="https://twitter.com/search?q=%24USDC&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$USDC</a>. <br>Intended address: 0xB087cfa70498175a1579104a1E1240Bd947f5870<br>Phishing address: 0xB087269DE7ba93d0Db2e12ff164D60F0b3675870 <a href="https://t.co/x1BJ77lhFv">pic.twitter.com/x1BJ77lhFv</a></p>— PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1730045158509727968?ref_src=twsrc%5Etfw">November 30, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>A significant incident of address poisoning was reported on November 30, impacting Florence Finance, a protocol for lending against real-world assets. The platform faced a severe loss of $1.45 million in USDC. Blockchain security firm Peck Shield detailed how the attacker used an address with similar starting and ending sequences as the authentic one, fooling the protocol.</p> 
<h2 class="wp-block-heading" id="h-the-need-for-vigilance-and-enhanced-security"><strong>The Need for Vigilance and Enhanced Security</strong></h2> 
<p>This alarming trend in address poisoning attacks highlights a critical need for enhanced security measures within the cryptocurrency space. As authorities and cybersecurity experts work tirelessly to track down and apprehend the perpetrator, it is imperative for users to exercise increased vigilance. Users are advised to double-check transaction details and adopt additional security measures to protect their digital assets.</p>

$5 Million Lost to Address Poisoning: Safe Wallet Users Targeted by Crypto Hacker

Table of Contents

CoinPedia News

Other articles published on Dec 5, 2023

Phoenix Group Soars 50% Post $371M Abu Dhabi IPO Debut

United Nations selects HBAR Foundation, Envision for blockchain-based carbon data marketplace

What is Time New Bank Coin?

BlackRock & Bitwise Submit Revised Prospectus For Bitcoin ETF

December's Brightest Moments in Crypto: Top Positive News Shaping the Industry

Bloomberg’s $530,000 Prediction for Bitcoin

Join our free newsletter for daily crypto updates!