Safe

Havoc

Million

Security

<p>The post <a href="https://coinpedia.org/news/5-million-lost-to-address-poisoning-safe-wallet-users-targeted-by-crypto-hacker/">$5 Million Lost to Address Poisoning: Safe Wallet Users Targeted by Crypto Hacker</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>In a sophisticated cyber attack spanning from November 26 to December 3, a skilled hacker specializing in ‘Address Poisoning’ has siphoned off an estimated $2.05 million from nearly 10 users of Safe Wallet, a popular cryptocurrency storage service. This revelation comes from Scam Sniffer, a leading Web3 fraud detection platform, which has been closely monitoring the situation.</p> 
<h2 class="wp-block-heading" id="h-a-trail-of-financial-havoc"><strong>A Trail of Financial Havoc</strong></h2> 
<p>Further examination of data from Dune Analytics by Scam Sniffer sheds light on the broader impact of this cybercriminal’s activities. Over the past four months, it is believed that the same attacker has amassed a total of $5 million, targeting 21 victims. In one notable instance, a user deposited $10 million in cryptocurrency into their secure wallet, only to incur a loss of $400,000 – a narrow escape considering the potential magnitude of the loss.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">about ~10 Safe wallets have lost $2.05 million to "address poisoning" attacks in the past week.<br><br>the same attacker has stolen $5 million from ~21 victims in the past four months so far. <a href="https://t.co/fu4kxaI3py">pic.twitter.com/fu4kxaI3py</a></p>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1731236292166590507?ref_src=twsrc%5Etfw">December 3, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="h-understanding-address-poisoning"><strong>Understanding Address Poisoning</strong></h2> 
<p>The method, known as ‘Address Poisoning’, involves the creation of a crypto address that closely resembles the victim’s regular transaction addresses, often matching the beginning and ending characters. The attacker then sends a small amount of cryptocurrency from this newly-created wallet to the target, thereby ‘poisoning’ their transaction history. Victims, failing to notice the subtle differences, may then mistakenly send substantial funds to the hacker’s address instead of the intended recipient.</p> 
<h2 class="wp-block-heading" id="h-a-high-profile-case-florence-finance"><strong>A High-Profile Case: Florence Finance</strong></h2> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw">#PeckShieldAlert</a> <a href="https://twitter.com/hashtag/FlorenceFinance?src=hash&amp;ref_src=twsrc%5Etfw">#FlorenceFinance</a> fell victim to a <a href="https://twitter.com/hashtag/AddressPoisoning?src=hash&amp;ref_src=twsrc%5Etfw">#AddressPoisoning</a> scam, resulting in a loss of ~$1.45M <a href="https://twitter.com/search?q=%24USDC&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$USDC</a>. <br>Intended address: 0xB087cfa70498175a1579104a1E1240Bd947f5870<br>Phishing address: 0xB087269DE7ba93d0Db2e12ff164D60F0b3675870 <a href="https://t.co/x1BJ77lhFv">pic.twitter.com/x1BJ77lhFv</a></p>— PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1730045158509727968?ref_src=twsrc%5Etfw">November 30, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>A significant incident of address poisoning was reported on November 30, impacting Florence Finance, a protocol for lending against real-world assets. The platform faced a severe loss of $1.45 million in USDC. Blockchain security firm Peck Shield detailed how the attacker used an address with similar starting and ending sequences as the authentic one, fooling the protocol.</p> 
<h2 class="wp-block-heading" id="h-the-need-for-vigilance-and-enhanced-security"><strong>The Need for Vigilance and Enhanced Security</strong></h2> 
<p>This alarming trend in address poisoning attacks highlights a critical need for enhanced security measures within the cryptocurrency space. As authorities and cybersecurity experts work tirelessly to track down and apprehend the perpetrator, it is imperative for users to exercise increased vigilance. Users are advised to double-check transaction details and adopt additional security measures to protect their digital assets.</p>

$5 Million Lost to Address Poisoning: Safe Wallet Users Targeted by Crypto Hacker

Table of Contents

CoinPedia News

Other articles published on Dec 5, 2023

The IRS intensifies crypto tax investigations – How much trouble are you in?

Generative Art NFTs: Understanding The Magic of Generative Art NFTs

Take-Two’s Shares Fall in Premarket After GTA 6 Trailer Release

BlackRock & Bitwise Submit Revised Prospectus For Bitcoin ETF

Bengaluru’s Premier Web3 Event, Blocktalks, Returns for a Spectacular Second Edition

XRP Coin: What to Expect?

Join our free newsletter for daily crypto updates!