Address Poisoning Scams Cost Crypto Users Over $60M in High-Profile Cases

Two devastating cases of address poisoning scams have resulted in combined losses exceeding $60 million, highlighting the growing sophistication of crypto fraud tactics. In January, a single user lost $12.25 million by inadvertently copying a malicious address from their transaction history, while December saw an even larger $50 million theft using similar methods.

The attacks exploit human error through carefully crafted address spoofing. Scammers initiate tiny 'dusting' transactions from addresses that closely mimic legitimate ones in a victim's history. When users later attempt to copy what appears to be a familiar address, they instead paste a fraudulent counterpart. The scheme succeeds because most wallet interfaces display only partial address strings, allowing attackers to substitute malicious characters in the obscured middle portion.

Parallel to these incidents, signature phishing attacks have surged dramatically. Recent data shows $6.27 million stolen across 4,741 victims in February alone - a 207% increase from December figures. These scams typically trick users into approving dangerous smart contract interactions or overly broad token permissions.