Crypto user loses $50 million in ‘address poisoning’ scam