$100K Address Poisoning Attack: Victims Fall for Fake Wallet Addresses

A crypto user lost approximately $100,000 USDT after sending funds to an address that looked similar to their intended recipient's wallet. The attacker had inserted a malicious address into the victim's transaction history about 66 days prior to the theft.

Cyvers Alerts reported on August 11th that its monitoring system detected the loss after the victim sent $100,000 USDT to an address controlled by the attacker.

The attack is attributed to a method called 'address poisoning', where attackers generate addresses that match the visible parts of a recipient's genuine address and then use small or zero-value transfers to place the imitation in a target's transaction record.