$575 Million Lost Due to Mistyped Address Transfers on Ethereum and BNB Chain

A new study from Peking University and Zhejiang University has shed light on a persistent and often overlooked risk in blockchain usage - mistyped address transfers. The research analyzed over 10 million addresses and more than 16 million exposed private keys, examining roughly 2.5 million transactions across both Ethereum and BNB Chain networks.

The study found that permanently lost funds from these errors total approximately $575 million, highlighting the critical vulnerability in blockchain technology: transactions are final and irreversible. Unlike traditional banking, there is no central authority to reverse a mistaken transfer, making it essential for users to exercise diligence.

The research identified three primary causes of these irreversible errors: confusion with testnet addresses, reuse of contract addresses, and exposure of private keys. Testnet addresses, which are used for development and testing, are often mistakenly used in real transactions, while contract addresses can trap funds permanently. Exposed private keys allow malicious actors to drain wallets, often with no recourse for recovery.