The post Address poison attackers strike again as unlucky victim loses $12.25M appeared on BitcoinEthereumNews.com.

Address poison attackers have stolen 4,556 ETH ($12.25 million) from a single victim after an earlier attack cost a trader $50 million in December last year.  An unlucky cryptocurrency victim recently lost 4,556 ETH, valued at $12.25 million, to a sophisticated “address poisoning” attack. The incident was reported by the blockchain security platform Scam Sniffer. Traders are now being warned to never copy addresses from their transaction history due to an increase in address poisoning scams. How do scammers use ‘address poisoning’ to steal millions? Overall, there has been a record-breaking surge in crypto theft, including a nearly $50 million loss in December 2025 and over 1 million poisoning attempts being detected every day on the Ethereum network. The victim, using the address 0xd6741220a947941bF290799811FcDCeA8AE4A7Da, intended to send funds to a legitimate contact. However, they unknowingly copied a “poisoned” address from their transfer history. The scammer’s address (0x6d9052b2DF589De00324127fe2707eb34e592e48) was specifically designed to look like the correct one (0x6D90CC8Ce83B6D0ACf634ED45d4bCc37eDdD2E48). Address poisoning attacks take advantage of human error, and how crypto wallets display addresses for easier viewing. For example, an address might be shown as 0x6D90…2E48. Scammers use powerful software to generate millions of “vanity” addresses until they find one that matches those first and last few characters. Once they have a matching address, they send a tiny amount of crypto or even a transaction with zero value to a user’s wallet, which puts the scammer’s address into their recent history. The next time the user attempts to copy that address from their history, they could very easily mistake the scammer’s address for the correct one. Once sent, the money is gone forever because blockchain transactions cannot be reversed. Security experts from companies like Cyvers and Immunefi report that these attacks are now happening at an industrial scale. In January 2026, Ethereum transactions…

---

Filed under: News - @ January 31, 2026 6:28 pm