Copy-Paste Mistake Leads to $50M USDt Loss in Address Poisoning Scam

491
SHARES
1.4k
VIEWS


A single transaction error led to one of many largest onchain losses seen this 12 months, after a consumer mistakenly despatched almost $50 million in USDt to a rip-off deal with in a basic deal with poisoning assault.

In keeping with onchain investigator Web3 Antivirus, the sufferer misplaced 49,999,950 USDt (USDT) after copying a malicious pockets deal with from their transaction historical past.

Handle poisoning scams rely on look-alike wallet addresses being inserted right into a sufferer’s transaction historical past by way of small transfers. When victims later copy an deal with from their transaction historical past, they could unknowingly choose the scammer’s lookalike deal with as an alternative of the meant recipient.

Onchain information exhibits the sufferer initially despatched a small take a look at transaction to the right deal with. Minutes later, nevertheless, the total $50 million switch was despatched to the poisoned deal with.

Person falls sufferer to handle poisoning rip-off. Supply: Web3 Antivirus

Associated: Attacker takes over multisig minutes after creation, drains up to $40M slowly

Refined deal with similarity sufficient to idiot skilled customers

Safety researcher Cos, founding father of SlowMist, famous the similarity between the addresses was refined however sufficient to deceive even skilled customers. “You may see the primary 3 characters and final 4 characters are the identical,” he wrote.

The sufferer’s pockets had been energetic for roughly two years and was primarily used for USDt transfers, in accordance with onchain evaluation. Shortly earlier than the loss, the funds had been withdrawn from Binance, suggesting the pockets was being actively managed on the time of the incident.

“That is the brutal actuality of deal with poisoning, an assault that doesn’t depend on breaking techniques, however on exploiting human habits,” one other onchain analyst wrote.

The attacker has since swapped the stolen USDt for Ether (ETH), splitting it into a number of wallets, and partially moved it into Twister Money.

Associated: Binance denies reports of delayed action over funds linked to Upbit hack

Crypto hacks hit $3.4 billion in 2025

As Cointelegraph reported, crypto-related hacks resulted in $3.4 billion in losses in 2025, marking the very best annual whole since 2022. The surge was largely pushed by a handful of large breaches focusing on main crypto entities reasonably than a broad rise in common assault measurement.