$2M Stolen in Bofur Capital Address Poisoning Attack

A $2 million heist has been pulled off using an address poisoning attack on cryptocurrency entity Bofur Capital.

The incident occurred after the victim withdrew funds from Compound, a decentralized lending protocol, and involved sending a small 'dust' transaction to create a fake address in their wallet's transaction history.

PeckShield, a blockchain security firm, reported that the attacker sent 0.0002 USDC to the victim's wallet, which was designed to create a fake address that looked similar to one used by the victim before.

The victim later attempted to transfer funds and copied the fraudulent address from their history, resulting in the loss of $2 million.