Crypto Wallet Loses $69.3 Million in Sneaky Address-Poisoning Attack

A crypto wallet lost $69.3 million worth of Wrapped Bitcoin (WBTC) due to an address-poisoning attack. The scammer sent a small amount of funds to an address resembling the victim's, tricking them into sending 1,155 WBTC to the wrong address. The scammer swapped the stolen WBTC for ETH and transferred it out.

Crypto Wallet Loses $69.3 Million in Deceptive Address-Poisoning Attack

A crypto wallet has fallen victim to an address-poisoning attack, resulting in the loss of $69.3 million worth of Wrapped Bitcoin (WBTC), according to blockchain security firm CertiK.

Address poisoning involves a scammer sending a small amount of crypto to a wallet via an address designed to closely resemble the wallet's own address, explains Ledger, a provider of digital asset wallets. This tactic tricks wallet holders into mistakenly copying the scammer's address from their transaction history and sending funds to that wallet instead of their intended recipient.

In this particular incident, CertiK highlights how a scammer mimicked an ETH transfer of 0.05 ETH, fooling the victim into sending 1,155 WBTC, equivalent to $69.3 million, to the fraudulent address.

WBTC is an ERC-20 token pegged to the value of BTC, enabling traders to invest in Bitcoin while remaining within the Ethereum ecosystem. The 16th-ranked crypto asset by market cap, WBTC was trading at $62,953 at the time of writing, having risen almost 7% over the past 24 hours.

Blockchain security firm Peckshield subsequently identified that the scammer exchanged the stolen WBTC for 23,000 ETH and then transferred them out of the wallet.

Ethereum, the second-ranked crypto asset by market cap, was trading at $3,116 at the time of writing. It has experienced a gain of over 4% in the past 24 hours.

This incident underscores the importance of vigilance when conducting crypto transactions. Wallet holders should meticulously verify the recipient address before sending funds and be wary of addresses that closely resemble their own. Additionally, using a secure wallet and storing private keys offline can further mitigate the risk of address-poisoning attacks.

By raising awareness and implementing robust security measures, crypto users can safeguard their assets and prevent falling prey to malicious actors employing deceptive tactics like address poisoning.