Connect with us
DAPA Banner

Crypto World

Address Poisoning Attack Drains $12.25 Million in ETH From Single Crypto Victim

Published

on

21Shares Introduces JitoSOL ETP to Offer Staking Rewards via Solana

TLDR:

  • Victim lost 4,556 ETH worth $12.25 million by copying a fraudulent address from transaction history. 
  • Scammers generate vanity addresses matching legitimate wallets to trick users into sending funds. 
  • Ethereum network experiences over 1 million address poisoning attempts every single day currently. 
  • Impersonation scams including address poisoning surged 1,400% with $17 billion stolen in 2025.

 

A cryptocurrency holder lost 4,556 ETH valued at approximately $12.25 million through an address poisoning attack, according to blockchain security firm Scam Sniffer.

The victim copied a fraudulent address from their transaction history instead of the intended recipient’s wallet. This incident adds to mounting crypto theft cases affecting the Ethereum network.

Security experts now warn users against copying addresses from their transfer histories.

Anatomy of the Million-Dollar Theft

The victim, operating from wallet address 0xd6741220a947941bF290799811FcDCeA8AE4A7Da, attempted to transfer funds to a known contact.

Advertisement

However, the user inadvertently selected a scammer’s address from recent transactions. The fraudulent wallet 0x6d9052b2DF589De00324127fe2707eb34e592e48 closely resembled the legitimate address 0x6D90CC8Ce83B6D0ACf634ED45d4bCc37eDdD2E48.

Scam Sniffer reported the attack on  X, warning that “another victim lost 4,556 ETH ($12.25M) by copying the wrong address from a contaminated transfer history.”

The security firm emphasized a critical safety measure, stating users should “never copy the address from transfer histories.” Address poisoning exploits how cryptocurrency wallets truncate long addresses for display purposes.

Attackers deploy automated software to generate millions of vanity addresses matching the first and last characters of target wallets.

When users view shortened versions like 0x6D90…2E48, they cannot distinguish between legitimate and fraudulent addresses. Scammers then send negligible amounts or zero-value transactions to populate victims’ recent activity.

The Ethereum network currently experiences over 1 million poisoning attempts daily, according to security analysts.

Advertisement

Blockchain transactions remain irreversible once confirmed, making stolen funds unrecoverable. This immutability feature transforms simple mistakes into permanent financial losses for affected users.

Escalating Wave of Crypto Security Breaches

December 2025 witnessed another catastrophic address poisoning case involving 49,999,950 USDT, nearly $50 million in losses. That victim implemented security measures by sending a 50 USDT test transaction first.

The scammer’s automated system detected the test transfer and immediately poisoned the transaction history before the main transfer.

The attacker converted stolen USDT into DAI and subsequently ETH to prevent asset freezing by authorities. Cyvers and Immunefi security researchers confirm these attacks now operate at industrial scale.

Advertisement

Citi analysts suggest the recent spike in Ethereum transactions exceeding 2.8 million daily stems partly from mass poisoning campaigns.

January 2026 brought additional security incidents across multiple blockchain platforms. The Saga EVM blockchain suspended operations on January 21 following a $7 million exploit.

Truebit protocol suffered $26.6 million in ETH losses when hackers exploited legacy vulnerabilities, causing token values to collapse nearly 100%.

French cryptocurrency tax platform Waltio faced ransom demands from ShinyHunters hacking group claiming data theft affecting 50,000 users.

Advertisement

Chainalysis data reveals that impersonation scams, including address poisoning, surged 1,400% year-over-year. Total cryptocurrency theft reached $17 billion throughout 2025, establishing new records for digital asset crime.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

NYSE Exchanges Remove Cap Limiting Crypto Options

Published

on

NYSE Exchanges Remove Cap Limiting Crypto Options

Two New York Stock Exchange-affiliated exchanges have removed the 25,000 contract position limit on options tied to 11 crypto exchange-traded funds.

NYSE Arca and NYSE American each filed three rule changes in the Federal Register on March 10 to remove contract position limits and price discovery restrictions for options linked to Bitcoin (BTC) and Ether (ETH) ETFs listed on their exchanges.

These were acknowledged by the Securities and Exchange Commission on Sunday, with the SEC waiving the standard 30-day waiting period for both sets of proposed rule changes, meaning they are now in effect.

11 crypto ETFs are impacted by the options rules changes on NYSE Arca and NYSE American. Source: SEC

The limits were imposed when crypto ETF options first started trading in November 2024. Limits of this nature are typically imposed to prevent market manipulation and volatility. T

The removal of those limits now puts them closer to how other commodity ETF options are treated, and gives institutions greater trading flexibility while also potentially boosting liquidity and making it easier to enter and exit positions. 

Advertisement

It also allows the crypto options to be traded as FLEX options, which include customizable terms such as non-standard strike prices, expiration dates and exercise styles.

Related: Scaramucci says BTC’s 4-year cycle still in play, forecasts rise in Q4 

A total of 11 crypto ETF options are affected by the rule changes, including BlackRock’s iShares Bitcoin Trust (IBIT), Fidelity’s Wise Origin Bitcoin Fund (FBTC) and ARK 21Shares Bitcoin ETF (ARKB).

Bitcoin and Ether ETFs issued by Bitwise and Grayscale are also affected.

Advertisement