KuCoin User Loses $100K in Wallet Address Poisoning Scam
A user on the KuCoin platform has lost over $100K in USDT due to a wallet address poisoning scam. The attack exploited the victim's UI habits, specifically the tendency to copy and paste addresses from transaction history without verifying them.
The attacker had initially poisoned the wallet 66-69 days ago by generating lookalike addresses that matched the first and last visible characters of a legitimate address used before. They then sent small transfers using the fake address to make it appear in the victim's history.
After the funds were transferred, the attacker quickly swapped the USDT for Ethereum on Uniswap V3 within 72 seconds, evading potential freezing by Tether. This is just one of many cases of wallet address poisoning scams, with reports indicating that between late 2025 and early 2026, Ethereum-related losses reached $62 million.