
$24M Lost to an Address Typo A wallet linked to trader Sillytuna was drained of ~$24M in aEthUSDC via address poisoning—attackers generated a lookalike address mimicking his transaction history. The stolen funds were converted to $20M DAI across two staging wallets, then began bridging to Arbitrum. Address poisoning exploits information asymmetry at the UX layer: copy-paste convenience versus character-by-character verification. Over $83M has been drained this way. The vulnerability isn't the protocol—it's the interface. @Rocket100ltd

