Connect with us
DAPA Banner

Crypto World

Ethereum Holder Loses $12 Million in This New Cyber Attack

Published

on

The Address Poisoning Attack.

A cryptocurrency investor has lost 4,556 Ethereum, valued at approximately $12.4 million, after falling victim to a sophisticated “address poisoning” attack.

Specter, a pseudonymous blockchain analyst, reported that the theft occurred roughly 32 hours after the attacker “dusted” the victim’s wallet with a nominal transaction.

How a Fake Look-Alike Address Cost an Ethereum Holder Millions

According to Specter’s on-chain analysis, the attacker spent two months monitoring the victim’s transaction activity. During this period, the hacker specifically identified a deposit address used for OTC settlements.

Sponsored

Advertisement

Sponsored

The attacker employed vanity address generation software to engineer a look-alike wallet. This fraudulent address shared the exact same starting and ending alphanumeric characters as the victim’s intended destination.

Advertisement

Address poisoning relies on the user’s tendency to check only the first and last few characters of a long hexadecimal string. In this instance, the fraudulent address and the legitimate OTC address appeared identical at a glance.

The attacker first initiated a minor transaction to the victim’s wallet, a tactic designed to populate the user’s activity log. This strategic move ensured the corrupted address appeared prominently at the top of the “recent transactions” history.

Relying on this compromised list, the victim inadvertently copied the poisoned address rather than the legitimate source when attempting to move the $12.4 million.

The Address Poisoning Attack.
The Address Poisoning Attack. Source: Scam Sniffer

This incident marks the second major eight-figure theft via this specific vector in recent weeks. Last month, a separate crypto trader lost approximately $50 million in a nearly identical scheme.

Industry stakeholders argue that these attacks are proliferating because wallet interfaces often truncate addresses to save screen space. This design choice effectively hides the middle characters where the discrepancies lie.

Advertisement

Meanwhile, this breach raises serious questions regarding verification protocols among institutional-grade investors.

While retail traders often rely on copy-pasting addresses, entities moving millions typically employ strict whitelisting procedures and test transactions.

Consequently, blockchain security firm Scam Sniffer has urged investors to abandon reliance on transaction history for recurring crypto payments. Instead, they recommend utilizing verified, hard-coded address books to mitigate the risk of interface spoofing.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Future US Crypto Crackdowns Could Happen Without Clear Rules

Published

on

Future US Crypto Crackdowns Could Happen Without Clear Rules

Failing to pass the crypto market structure bill, known as the CLARITY Act, could leave the door open for a future less industry-friendly US government to crack down on crypto again, Peter Van Valkenburgh the executive director of advocacy group Coin Center says.

In an X post on Friday, Van Valkenburgh argued that rejecting developer protections in legislation like the CLARITY Act and the Blockchain Regulatory Certainty Act in favor of “short-term business interests” and the “continued goodwill of those in charge” could lead to a “grim” future for the industry.

“The point of passing CLARITY is not to trust this administration. It is to bind the next one,” he said, adding that “A world without CLARITY’s statutory protections for developers is a world governed by prosecutorial discretion, political fashion, and fear.”

The CLARITY Act stalled in the Senate after banks, crypto firms, and lawmakers failed to agree on key provisions — including whether to allow stablecoin yields. The bill covers a range of measures, including frameworks for registering crypto intermediaries, regulating digital assets and classifying tokens

Advertisement
Source: Peter Van Valkenburgh

During the previous US administration, former SEC Chair Gary Gensler drew heavy criticism from the crypto industry for allegedly crafting policy through enforcement actions and legal settlements with crypto firms rather than formal rulemaking.

Nothing set in stone without legislation

Van Valkenburgh also predicts that, without legislative clarification, a future administration’s Department of Justice could ramp up prosecutions of privacy-tool developers as unlicensed money transmitters, and that existing regulatory interpretive guidance could be revoked.

Related: Crypto investor sentiment will rise once CLARITY Act is passed: Bessent

Since Gensler resigned on Jan. 20, 2025, crypto proponents have seen a regulatory shift by the SEC, including the dismissal of several long-running enforcement actions against crypto firms and friendlier guidance on how the agency will treat crypto.

“If we lose this moment because we thought we’d have a bit more revenue and a bit more latitude under the short-term friendly discretion of the current administration, then we lose our way,” Van Valkenburgh said.

Advertisement

“We fail to stand up for the kind of transparency, neutrality, and openness that crypto stands for. And worse, we will have helped tie the noose ourselves, handing it to the future officials who will be only too happy to pull it tight.”

Magazine: Nobody knows if quantum secure cryptography will even work