Bofur Capital Suffers $2M Loss in Address Poisoning Attack

Bofur Capital has suffered a significant loss of $2M due to an address poisoning attack. The incident occurred after the company withdrew funds from Compound, a leading decentralized finance (DeFi) protocol.

The attackers exploited a security gap by sending a small amount of USDC 'dust' to the victim's wallet, tricking them into copying and pasting the wrong address. This allowed the thieves to drain the funds, which were then swapped for 2M DAI and transferred to an Ethereum address (0xe2eB...1816a).

This case highlights the growing threat of address poisoning scams in the DeFi space. These types of attacks often rely on social engineering tactics to deceive victims into revealing sensitive information or making critical mistakes.