$2M Lost in Sophisticated Address Poisoning Attack on Bofur Capital

A cryptocurrency entity known as Bofur Capital has lost approximately $2 million in an address poisoning attack, according to blockchain security firm PeckShield.

The incident occurred shortly after the victim withdrew funds from the decentralized lending protocol Compound, highlighting the growing sophistication of wallet-targeting scams.

The attacker initiated the scheme by sending a small 'dust' transaction of 0.0002 USDC to the victim's wallet, creating a fake address in their transaction history that closely resembled a legitimate one previously used.

When the victim later attempted to transfer funds, they copied the fraudulent address from their history and sent the funds to it, resulting in the loss of $2 million.