logo
    • Buy Crypto
    • Markets
    • Futures
    • Spot
    • Earn
    • Affiliates & AI
    • More
    1. WEEX
    2. Crypto News
    3. Crypto Wallet Addresses Are Regularly Poisoned. This Man Lost Nearly 400,000 Zlotys

    Crypto Wallet Addresses Are Regularly Poisoned. This Man Lost Nearly 400,000 Zlotys

    By: rootdata|2026/08/14 19:01:00
    0
    Share
    copy
    Prefer us on GooglePrefer us on Google
    SENTSENT
    00.00%--
    FORMFORM
    00.00%--
     

    One of the cryptocurrency investors has just lost nearly 400,000 zlotys due to an "address poisoning" attack. In short, he sent his savings to a scammer's wallet address thinking it was his own. Cybersecurity experts warn that such schemes are becoming increasingly common, with criminals leveraging automation and hoping that the law of large numbers will allow them to "catch" a sufficient number of victims. Statistics show that they succeed remarkably often. In this article, we will describe in detail what address poisoning entails and how to protect yourself from it.

    Key Facts

    • The victim lost over 100,000 USDT after copying the address from the transaction history of his own wallet.
    • The attack is called address poisoning.
    • The stolen stablecoins were exchanged for 52.8 ETH in under a minute and a half, preventing Tether, the issuer of the USDT stablecoin, from freezing the funds.
    • Between 2022 and 2024, researchers recorded 270 million attempts of such attacks on Ethereum and the BNB network, 17 million attacked addresses, and accounted for 83.8 million USD in losses.
    • By the end of July 2026, criminals took it a step further and replaced the advertising script of Adform, which substituted wallet addresses directly in the user's clipboard.

    Address poisoning, or sending cryptocurrencies to someone else's address

    The mechanism of classic address poisoning is quite primitive but still incredibly effective. It involves the attacker using automation software to create a vast number of addresses on the blockchain that mimic existing user wallets. Primarily, they try to replicate the first and last 4-6 digits, as these elements are most often checked by senders before they click the "Send" button.

    The next step is to "encourage" the victim to "use" the fake address. This is done through a process called dusting, where tiny worthless tokens or NFTs are sent to the victim's address (this process is also fully automated), which appear in the transaction history of the attacked wallet.

    The victim's fate is then sealed by their own actions. The cybercriminal relies on the fact that, after sending funds from one of their wallets to another for the umpteenth time, the victim will (out of laziness) use the address found in the transaction history and copy it using the simple copy-paste method into the "Recipient" field, EVENTUALLY checking the first and/or last 4-6 digits beforehand.

    If everything goes smoothly, the money goes entirely to the "poisoner's" account. According to Blockaid data, one in 200 "attempts" ends in success. A lot? A little? If we consider the scale (17 million attacked according to 2025 data), the above number translates to losses reaching nearly 90 million USD (or about 350-400 million Polish zlotys) during the period from 2022 to 2024.

    A new attack vector is even more dangerous

    Address poisoning requires that the victim themselves choose the substituted address of their own free will. However, a new attack vector has emerged that does not even require this.

    On July 27, a modified version of the script trackpoint-async.js appeared on the servers of Adform, one of the largest European advertising platforms. The company detected irregularities the very next day, but the malicious code was available on the network for at least another week.

    The mechanism was exceptionally dangerous. The script checked the clipboard content every few seconds, where we copy content by pressing, for example, the CTRL+C key combination. When it detected a correctly formatted Bitcoin, Ethereum, or Tron address, it immediately replaced it with an address belonging to a scammer.

    But that's not all. The code could also:

    • replace addresses just pasted into form fields,
    • intercept copy, cut, and paste operations,
    • change the address again after another copy of the correct version,
    • send information about the visited page to the server.

    In practice, re-copying the correct address did not solve the problem. If the malicious script was still running on the page, it could perform another substitution.

    The attack did not require the victim to install a program, download a file, or consciously run a suspicious attachment. It was enough to visit a website using Adform's advertising infrastructure that loaded the infected script.

    The scale of potential exposure was enormous. Thousands of companies use Adform, and the platform boasts 1.5 billion ad impressions daily for clients from over 180 countries.

    How to protect yourself?

    How to avoid becoming a victim of address poisoning? For large transfers, check the entire address, not just the first and/or last digits, preferably using a source independent of where it was copied from.

    It is also worth adhering to a few rules:

    • Do not copy addresses directly from transaction history.
    • Use address books and whitelists.
    • For larger amounts, first make a test transfer.
    • With a hardware wallet, always compare the address with what is displayed on the device screen.
    • Limit the execution of unnecessary third-party scripts in the browser.

    In the case of cryptocurrencies, one substituted letter or digit usually means an irreversible transaction. Therefore, for larger amounts, the recipient's address should be treated similarly to a bank account number in a bank transfer, with the difference that there is usually no bank on the blockchain that can stop a wrongly sent operation.

    -- Price

    --
    --
    --

    This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.

    You may also like

    Financing Weekly | Stripe Acquires AI Company OpenRouter for Over $7 Billion; AI Chip Company Etched Raises $700 Million

    Financing Weekly | Stripe Acquires AI Company OpenRouter for Over $7 Billion; AI Chip Company Etched Raises $700 Million

    Crypto VC funding: ZeroStack secures $1B, Ripple raises $275M

    Crypto VC funding: ZeroStack secures $1B, Ripple raises $275M

    Liquid Launches 'Co-Invest' Browser Extension for Trading via Social Media Feeds

    Liquid Launches 'Co-Invest' Browser Extension for Trading via Social Media Feeds

    On the 17th, multi-asset trading platform Liquid launched the Co-Invest browser extension, enabling direct trading from social media feeds. Users can discover stocks of interest on X or Reddit...
    RDDT Stock Jumps on S&P 500 Inclusion: Is Reddit Stock a Buy Before August 18?

    RDDT Stock Jumps on S&P 500 Inclusion: Is Reddit Stock a Buy Before August 18?

    RDDT stock surged after Reddit was added to the S&P 500. Here's why the stock jumped, the latest price outlook, bull vs. bear case, key risks, and whether RDDT is still a buy before the August 18 index inclusion.
    New Scam Method Involving XRP

    New Scam Method Involving XRP

    Analysts at Societe Generale Say Bullish Bets on the Dollar Are Decreasing

    Analysts at Societe Generale Say Bullish Bets on the Dollar Are Decreasing

    Can Blockchain Work Without Its Own Cryptocurrency?

    Can Blockchain Work Without Its Own Cryptocurrency?

    Indian gasoline twice as expensive as Russian, has not reached gas stations

    Indian gasoline twice as expensive as Russian, has not reached gas stations

    CZ sends $965K to Giggle Academy, retires public wallet

    CZ sends $965K to Giggle Academy, retires public wallet

    Trump Orders Major Reduction in US-South Korea Joint Exercises

    Trump Orders Major Reduction in US-South Korea Joint Exercises

    Cryptocurrency Investors Lose €90,000 Due to Mistakes

    Cryptocurrency Investors Lose €90,000 Due to Mistakes

    Two cryptocurrency investors lost around €90,000 due to simple mistakes.
    Blue House in Talks Over U.S. Investment Pressure

    Blue House in Talks Over U.S. Investment Pressure

    US Asks 35 Countries to Choose Sides in US-China AI Camp

    US Asks 35 Countries to Choose Sides in US-China AI Camp

    HashKey, YF Life test HKDAP stablecoin for insurance payments

    HashKey, YF Life test HKDAP stablecoin for insurance payments

    "Stop sending bitcoin products to your home," says developer

    "Stop sending bitcoin products to your home," says developer

    Changes in Tax Decision Appeals

    Changes in Tax Decision Appeals

    Wall Street Journal moves to dismiss Binance defamation case

    Wall Street Journal moves to dismiss Binance defamation case

    Singapore Police Reveal $11.8 Million Loss in Cryptocurrency Scam

    Singapore Police Reveal $11.8 Million Loss in Cryptocurrency Scam

    Renan Santos Commits to Bitcoin at Blockchain Rio 2026: "We Can Be the Largest Crypto-Friendly Nation"

    Renan Santos Commits to Bitcoin at Blockchain Rio 2026: "We Can Be the Largest Crypto-Friendly Nation"

    The candidate attended the largest blockchain event in Latin America and discussed his proposals for the sector.
    Data Verification for Military-Obligated Workers Launched on 'Diia'

    Data Verification for Military-Obligated Workers Launched on 'Diia'

    Morph launches non-custodial stablecoin payments platform

    Morph launches non-custodial stablecoin payments platform

    Suspicious Cryptocurrency Transactions: Banks to Require Disclosure of Transfer Chains

    Suspicious Cryptocurrency Transactions: Banks to Require Disclosure of Transfer Chains

    Suspicious cryptocurrency transactions will primarily affect large businesses and companies engaged in foreign trade: banks will need a clear explanation of where the money came from, why the digital currency was purchased, and to whom it was subsequently sent. Cryptocurrency in Russia is gradually ...
    262.2 Bitcoin Transfer from Lazarus-Linked Wallet

    262.2 Bitcoin Transfer from Lazarus-Linked Wallet

    🚨 262.2 Bitcoin was moved from a Lazarus-linked wallet to two new addresses. 📌 The total value of the transfer reached approximately $16.6 million when Bitcoin was at $63,800, and no direct selling signal was formed for $BTC. 🔍 The lack of direction towards exchanges by the recipient wallets indi...
    Hyperliquid Market in the USA: Why DeFi Services Struggle to Exit the Regulatory Gray Zone

    Hyperliquid Market in the USA: Why DeFi Services Struggle to Exit the Regulatory Gray Zone

    The Hyperliquid market in the USA has become one of the main topics for the DeFi industry: decentralized finance projects want to work with American users, but even the potential adoption of the CLARITY Act does not eliminate key legal risks for them. The consideration of the CLARITY Act in the US S...
    U.S. Supports Bank Entry for Cryptocurrency Firms—Regulators Announce Policy

    U.S. Supports Bank Entry for Cryptocurrency Firms—Regulators Announce Policy

    How Russia Evades Sanctions Using Cryptocurrencies?

    How Russia Evades Sanctions Using Cryptocurrencies?

    The Threat Extends to Other Cryptocurrency Networks: What Is the Market Doing?

    The Threat Extends to Other Cryptocurrency Networks: What Is the Market Doing?

    Kalshi and DoubleZero Launch Real-Time Market Data Subscription Service

    Kalshi and DoubleZero Launch Real-Time Market Data Subscription Service

    85 Bitcoins Moved from Dormant Wallet

    85 Bitcoins Moved from Dormant Wallet

    Ravencoin drops to record low as miners move to reverse exploited chain

    Ravencoin drops to record low as miners move to reverse exploited chain

    Financing Weekly | Stripe Acquires AI Company OpenRouter for Over $7 Billion; AI Chip Company Etched Raises $700 Million

    Crypto VC funding: ZeroStack secures $1B, Ripple raises $275M

    Liquid Launches 'Co-Invest' Browser Extension for Trading via Social Media Feeds

    On the 17th, multi-asset trading platform Liquid launched the Co-Invest browser extension, enabling direct trading from social media feeds. Users can discover stocks of interest on X or Reddit...

    RDDT Stock Jumps on S&P 500 Inclusion: Is Reddit Stock a Buy Before August 18?

    RDDT stock surged after Reddit was added to the S&P 500. Here's why the stock jumped, the latest price outlook, bull vs. bear case, key risks, and whether RDDT is still a buy before the August 18 index inclusion.

    New Scam Method Involving XRP

    Analysts at Societe Generale Say Bullish Bets on the Dollar Are Decreasing

    ...
    One account, every market
    Trade stocks, gold, oil and more!
    One account, every marketTrade now

    Contents

    sentient

    Latest articles

    08/24/2026

    Financing Weekly | Stripe Acquires AI Company OpenRouter for Over $7 Billion; AI Chip Company Etched Raises $700 Million

    BDXBDX
    00.00%--
    SENTSENT
    00.00%--
    ZECZEC
    00.00%--
    08/22/2026

    Crypto VC funding: ZeroStack secures $1B, Ripple raises $275M

    MM
    00.00%--
    BDXBDX
    00.00%--
    SENTSENT
    00.00%--
    08/17/2026

    RDDT Stock Jumps on S&P 500 Inclusion: Is Reddit Stock a Buy Before August 18?

    RDDT stock surged after Reddit was added to the S&P 500. Here's why the stock jumped, the latest price outlook, bull vs. bear case, key risks, and whether RDDT is still a buy before the August 18 index inclusion.
    SENTSENT
    00.00%--
    08/17/2026

    New Scam Method Involving XRP

    SENTSENT
    00.00%--
    SIGNSIGN
    00.00%--
    08/17/2026

    Can Blockchain Work Without Its Own Cryptocurrency?

    SENTSENT
    00.00%--
    More

    Latest coin listings on WEEX

    logoCommunity
    iconiconiconiconiconiconicon
    Customer Support:@weikecs
    Business Cooperation:@weikecs
    Quant Trading & MM:bd@weex.com
    VIP Program:support@weex.com
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Customer Support Bot
    • VIP Services
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Customer Support Bot
    • VIP Services
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE

    Where new wealth is made

    Download app

    Sign Up
    h5 logo
    Download