ETHSecurity Community

A victim lost $510,294 due to copying the wrong address from transaction history!

Victim:
0x0d534863a71d5e68d5c919a4c2ef47c3a7a792c0

Fake address:
0x4049Ebf479Fa49924e120490d119f0827cAa9aeC

Legitimate address:
0x40491fe2bA81621475c894Ebe8bcad56C7da9aec

How transaction history poisoning works:

1. Scammer sends fake/dust transfer with similar address;
2. Their fake address appears in your history;
3. You copy address from history thinking it's legitimate;
4. Funds get sent to scammer instead.

How to stay protected:

1. Always double-check the addresses you're sending funds to;
2. Never copy addresses from transaction histories;
3. Use a wallet that supports whitelisting or bookmarks.

My article on topic: https://officercia.mirror.xyz/n-sXszeDoNU3wtUUxRQEYvxQlZ6loaFElILzm2gnMzw

Good to know. Mad they bruteforce addresses with similiar start/ending fuck I could have been fooled so hard aswell