A recent incident in the cryptocurrency space highlights the vulnerability of investors to address poisoning attacks, leading to a staggering loss of $70 million in Wrapped Bitcoin (WBTC). The attack took place over a brief period of six hours, causing concern within the cryptocurrency community.
According to a report by Lookonchain on the situation, the victim created a new wallet address, "0xd9A1b0B1e1aE382DbDc898Ea68012FfcB2853a91," and initiated a transfer of 0.05 Ethereum (ETH) to this address.
This type of incident is not uncommon in the decentralized finance (DeFi) sector, often due to gas fees. Cryptocurrency investors typically need to fund new addresses with the respective native tokens, such as Ether (ETH), to cover future gas fees.
In this case, a scammer exploited the investor's actions by generating a similar-looking address through address poisoning. By transferring zero ETH to the victim's new address, the scammer misled the investor. As a result, when the investor attempted to transfer 1,155 WBTC, mistakenly copying the scammer's address instead of their own, the loss of about $71 million occurred.
It is crucial for cryptocurrency users to pay close attention to full addresses and not merely rely on the first and last characters for verification. Increasing awareness and educating investors about potential risks in cryptocurrency transactions are essential steps to prevent such substantial losses. Vigilance and adherence to security protocols remain paramount as the cryptocurrency landscape continues to develop.
