An Ethereum <button class="define-target" id="wallet">wallet</button> was apparently drained of 1,155&nbsp;<button class="define-target" id="wrapped-token">wrapped</button> bitcoin (~$72.7&nbsp;million) when they transferred it to a malicious address that had been operating an <button class="define-target" id="address-poisoning">address poisoning</button> scheme.<p>Address poisoning is a scam tactic that takes advantage of crypto traders' tendencies to copy and paste wallet <button class="define-target" id="address">addresses</button> from their transaction histories, since the addresses are long strings of characters that are not practical to type from memory. By creating a new wallet address with identical start and/or ending character strings to addresses used by the victim, and spamming the victim with transactions from that similar address, scammers are sometimes able to get victims to erroneously copy the spoofed address for future transfers.</p><p>That's what appears to have happened in this case, when a victim transferred 1,155 wrapped bitcoin — tokens pegged to the bitcoin price meant for use on the Ethereum blockchain — to the malicious address.</p><p>The victim and the exploiter later reached an agreement for the return of most of the funds, with the exploiter keeping $7.2&nbsp;million as a "<button class="define-target" id="bug-bounty">bounty</button>".</p>

Archived tweet

Tweet by Cyvers Alerts:

Tweet #1

Image #1:

Links: