when

Reported by The Defiant, an unsuspecting user lost $69 million in WBTC after sending the funds to an address linked with an attack known as address poisoning.
Web3 cybersecurity firm Certik first alerted of the malicious transaction early Friday morning. The attacker mimicked a transfer of 0.05 ETH, or $150, which led the victim to send the funds to the wrong address, according to Certik’s X account.
Poisoning addresses <a rel="noopener noreferrer nofollow" target="_blank" href="https://officercia.mirror.xyz/n-sXszeDoNU3wtUUxRQEYvxQlZ6loaFElILzm2gnMzw">refers to</a> attackers sending spam transactions to an address in order to confuse inattentive users. Users then copy the fraudulent address–which usually begins and ends with the same six digits– instead of sending funds to a legitimate wallet address.
Hackers can know an address linked to a user’s exchange account because of recurring payments and other transaction flows.
The pseudonymous <a rel="noopener noreferrer nofollow" target="_blank" href="https://twitter.com/officer_cia">Officer</a>, a threat researcher formerly of the Web3 cybersecurity firm ImmuneFi, told The Defiant that these types of attacks are very common but usually have a low success rate.
According to <a rel="noopener noreferrer nofollow" target="_blank" href="https://etherscan.io/token/0x2260fac5e5542a773aa44fbcfedf7c193bc2c599?a=0xfb5bca56a3824e58a2c77217fb667ae67000b7a6">Etherscan</a>, after the attack, the perpetrator moved the funds in eight separate transactions.
According to Officer, many users are lazy when operating in the crypto space.
“A lot of people have a bad habit of blind copying the last address from their transaction history, just to be sure,” he said. Hackers take advantage of this behavior by sending small sums of crypto from similar-looking addresses.
How to counter such attacks?
“Don't trust Clipboard especially given the fact that malware with almost the same scheme exists (it usually targets a clipboard), check all digits one by one and add hot addresses to the allow list (if possible),” he warned.
Exploits have been on a negative curve during 2024.
Hackers stole $336 million in crypto in the first quarter this year, a 23% drop from the same time last year, according to the <a rel="noopener noreferrer nofollow" target="_blank" href="https://downloads.ctfassets.net/t3wqy70tc3bv/34mVQUo6KAMcKF7rHyRdNM/d6c8710283abad55ec786c56f94eb3d1/Immunefi__Crypto_Losses_in_Q1_2024.pdf">latest report</a> by Web3 security firm ImmuneFi.

Users Lost $69M in $WBTC due to Address Poisoning

TokenInsight

Other articles published on May 6, 2024

BitFinex Under Threat? Hackers Allege Access to 400K Users’ Accounts

Exploring BNB Token’s Market Resilience: A Deep Dive into Binance Coin (BNB) Performance

Warren Buffett Raises Concerns Over AI’s Impact on Cryptocurrency Market: Implications for Bitcoi...

Godrej Properties (GPL) Shares Skyrocket by 7% Following Record-Breaking Q4 Profits

Analysts Predict Polkadot (DOT) Poised for Massive 120% Price Jump: A Deep Dive into the Crypto M...

Dogecoin Confirms a New Macro Uptrend: Will DOGE Price Make It to $0.3 This Month?

Join our free newsletter for daily crypto updates!