Crypto User Loses $600K in Address Poisoning Attack Amid Rising Threat
A cryptocurrency trader suffered a $600,000 loss on February 17 due to an address poisoning attack, according to blockchain security firm Cyvers. The incident occurred when the victim copied a fraudulent address from their transaction history—a tactic increasingly deployed by attackers this year.
Address poisoning relies on zero-value transfers, where attackers flood a victim's wallet with fake transactions containing similar-looking addresses. The strategy preys on users who copy-paste addresses without manual verification. Once executed, such transactions are irreversible, leaving victims with no recourse.
This attack joins a surge of high-profile cases in 2026, including a $50 million USDT theft in December 2025—the second-largest recorded loss of its kind. The escalation underscores systemic vulnerabilities in user behavior and wallet security practices.
