BTCC / BTCC Square / Coingape /
Crypto User Loses $50M in Address-Poisoning Scam: The High-Stakes Heist Hiding in Plain Sight

Crypto User Loses $50M in Address-Poisoning Scam: The High-Stakes Heist Hiding in Plain Sight

Author:
Coingape
Published:
2025-12-20 10:56:31
9
2

A single transaction just vaporized a fortune. In an address-poisoning attack that reads like a digital ghost story, a crypto user watched $50 million disappear—not to a hacker's code, but to a copycat's camouflage.

The Anatomy of a Digital Bait-and-Switch

Forget complex smart contract exploits. This scam weaponizes human error and interface design. Attackers generate a wallet address nearly identical to a target's frequent contact. They send a tiny, worthless transaction to the victim's wallet, planting the fraudulent address in their transaction history. Later, when the victim goes to send a legitimate, massive transfer, they copy the wrong address from their own history—the poisoned one. The funds sail directly to the scammer.

It's a psychological hack, bypassing tech safeguards by exploiting trust in one's own records. The numbers are stark: $50 million gone in the time it takes to click 'confirm.'

Security in an Age of Mimicry

The incident underscores a brutal truth in decentralized finance: your greatest vulnerability often sits between the chair and the keyboard. It calls for a paranoid new protocol—triple-checking every character, using address book features, and verifying via secondary channels. In crypto, convenience is the enemy of security.

A $50 million reminder that in the wild west of digital assets, the most dangerous outlaws don't wear black hats—they wear perfect disguises. It's the kind of efficiency Wall Street bankers could only dream of, just without the paperwork or the pesky regulations.

Crypto User Loses $50M in Address-Poisoning Scam

A crypto user lost nearly $50 million in USDT after falling for an address-poisoning scam. The victim accidentally copied a look-alike wallet address from their transaction history and sent 49,999,950 USDT to the attacker. After receiving the funds, the scammer converted the USDT into ETH, split it across multiple wallets, and moved part of it into Tornado Cash to hide the trail. The incident highlights how small mistakes can lead to massive losses in crypto transfers.

|Square

Get the BTCC app to start your crypto journey

Get started today Scan to join our 100M+ users

All articles reposted on this platform are sourced from public networks and are intended solely for the purpose of disseminating industry information. They do not represent any official stance of BTCC. All intellectual property rights belong to their original authors. If you believe any content infringes upon your rights or is suspected of copyright violation, please contact us at [email protected]. We will address the matter promptly and in accordance with applicable laws.BTCC makes no explicit or implied warranties regarding the accuracy, timeliness, or completeness of the republished information and assumes no direct or indirect liability for any consequences arising from reliance on such content. All materials are provided for industry research reference only and shall not be construed as investment, legal, or business advice. BTCC bears no legal responsibility for any actions taken based on the content provided herein.