Address poisoning attack steals $100,000 USDT, converted to ETH

Huo Xing Finance reports, according to Cyvers Alert monitoring, an address poisoning attack has been detected, resulting in approximately $100,000 in USDT losses for the victim. Approximately 66 days ago, the attacker poisoned the victim’s wallet by sending transactions to create a malicious address that closely resembled a legitimate one. The victim failed to verify the full wallet address and mistakenly sent funds to the attacker’s address. Following the incident, the attacker exchanged the stolen USDT for ETH to mitigate potential freezing risks and currently holds approximately 52.8 ETH. Cyvers advises users to always fully verify wallet addresses when conducting on-chain transfers and to avoid relying solely on address records from transaction history. Security experts also recommend using AI-based on-chain security tools to detect anomalous transaction behavior in real time, reducing risks such as address poisoning and phishing attacks. Address poisoning has become one of the most common fraud methods in the crypto asset space in recent years, with attackers typically exploiting users’ habit of copying addresses from past transactions by forging similar-looking addresses to trick them into transferring assets.