地址中毒：加密货币诈骗者通过隐秘攻击吸走数百万美元

在一起重大的加密货币盗窃案中，黑客精心策划了一次“地址中毒”攻击，误导受害者将价值 6800 万美元的比特币转移到受污染的收件人钱包中。区块链数据显示，受害者的以太坊钱包遭到攻击，导致 1155 个 Wrapped 比特币代币丢失。这次攻击凸显了钱包在解决中毒问题方面的脆弱性，黑客利用钱包地址的相似性来欺骗受害者将资金发送到未经授权的目的地。

Address Poisoning: A Stealthy Attack Siphoning Millions from Crypto Wallets

地址中毒：秘密攻击从加密钱包中窃取数百万美元

In a chilling demonstration of the relentless ingenuity of crypto criminals, a recent address poisoning scam has resulted in the theft of $68 million from an unsuspecting victim. Blockchain data paints a sobering picture of a once-affluent Ethereum user who has now lost their entire Bitcoin fortune, leaving behind a mere $1.6 million in their depleted crypto coffers.

最近的一次地址中毒骗局已导致毫无戒心的受害者被盗 6800 万美元，这充分展现了加密货币犯罪分子的狡猾之处。区块链数据描绘了一幅令人警醒的画面：一位曾经富裕的以太坊用户现在失去了全部比特币财富，在他们耗尽的加密金库中仅留下了 160 万美元。

Address poisoning, a deceptive and insidious attack, involves contaminating a victim's wallet history with a seemingly innocuous transaction. This transaction, often carrying a negligible value, is strategically crafted to inject the attacker's wallet address into the victim's transaction record.

地址中毒是一种欺骗性且阴险的攻击，涉及通过看似无害的交易污染受害者的钱包历史记录。这笔交易的价值通常可以忽略不计，经过精心设计，旨在将攻击者的钱包地址注入受害者的交易记录中。

Exploiting the tendency of popular wallet software to abbreviate addresses, displaying only the initial and final characters, attackers carefully design their malicious addresses to closely resemble genuine ones. This subtle manipulation makes it virtually impossible to discern the subtle differences in the middle characters that would otherwise betray their nefarious intent.

利用流行钱包软件缩写地址的趋势，仅显示首字母和结尾字符，攻击者精心设计其恶意地址，使其与真实地址非常相似。这种微妙的操纵使得几乎不可能辨别中间人物的微妙差异，否则就会暴露他们的邪恶意图。

In the case of this $68 million heist, the attacker's address and the genuine target address shared identical characters at the beginning (0xd9A1) and the end (853a91). This deceptive resemblance created a perfect setup for the victim to fall prey to the scam.

在这起价值 6800 万美元的抢劫案中，攻击者的地址和真正的目标地址在开头 (0xd9A1) 和结尾 (853a91) 共享相同的字符。这种欺骗性的相似性为受害者创造了一个完美的陷阱，让他们成为骗局的牺牲品。

Once the attacker's address found its way into the victim's transaction history, the stage was set for the final act of treachery. The victim, unaware of the lurking threat, copied the contaminated address from their history with the intention of receiving funds. Tragically, they were mistaken in their belief that it was their own address or that of a trusted contact.

一旦攻击者的地址进入受害者的交易历史记录，最后的背叛行为就已准备就绪。受害者没有意识到潜在的威胁，从他们的历史记录中复制了受污染的地址，意图接收资金。可悲的是，他们错误地认为这是他们自己的地址或值得信赖的联系人的地址。

With the victim's trust exploited, the attacker swiftly withdrew a staggering 1155 Wrapped Bitcoin (WBTC), an Ethereum-based token pegged to the value of Bitcoin, from the victim's wallet. This audacious theft left the victim reeling, their once-substantial crypto fortune reduced to a fraction of its former glory.

利用受害者的信任，攻击者迅速从受害者的钱包中提取了惊人的 1155 个 Wrapped Bitcoin (WBTC)，这是一种与比特币价值挂钩的基于以太坊的代币。这种大胆的盗窃行为让受害者感到震惊，他们曾经丰厚的加密货币财富已沦为昔日辉煌的一小部分。

Address poisoning has emerged as a formidable threat in the Ethereum ecosystem, with several high-profile cases highlighting its devastating potential. Last year, a series of SafeWallet users were targeted, resulting in the theft of $2 million within a single week. In February of this year, a Kraken user lost a staggering 1 million USDT after scammers employed a similar address poisoning tactic.

地址中毒已成为以太坊生态系统中的一个巨大威胁，几个引人注目的案例凸显了其破坏性的潜力。去年，一系列 SafeWallet 用户成为攻击目标，导致一周内 200 万美元被盗。今年 2 月，诈骗者采用类似的地址投毒策略，导致一名 Kraken 用户损失了 100 万 USDT。

Recognizing the severity of this threat, Metamask, a popular crypto wallet provider, has issued a stern warning to its users. They strongly advise against relying on transaction history as a means of copying addresses. Instead, they recommend adding frequently used addresses to a trusted address book, ensuring that only whitelisted addresses are utilized for transactions.

认识到这一威胁的严重性，流行的加密钱包提供商 Metamask 已向用户发出严厉警告。他们强烈建议不要依赖交易历史记录作为复制地址的手段。相反，他们建议将常用地址添加到可信地址簿中，确保仅使用白名单地址进行交易。

"This advice applies as much to your own address as it does to those of others to whom you may be sending funds," Metamask cautions on its website.

Metamask 在其网站上警告说：“这条建议不仅适用于您自己的地址，也适用于您可能向其发送资金的其他人的地址。”

The recent $68 million address poisoning scam serves as a stark reminder of the ever-evolving threats that lurk in the digital realm. Crypto users must remain vigilant, constantly adapting their security measures to stay ahead of the relentless tide of cybercriminals. By implementing robust security practices, such as avoiding transaction history as a source of addresses and maintaining a whitelisted address book, crypto enthusiasts can bolster their defenses against these sophisticated attacks that threaten to drain their digital wallets.

最近发生的价值 6800 万美元的地址中毒骗局清楚地提醒人们，数字领域中潜伏着不断演变的威胁。加密货币用户必须保持警惕，不断调整其安全措施，以领先于无情的网络犯罪分子。通过实施强大的安全实践，例如避免交易历史记录作为地址来源和维护白名单地址簿，加密货币爱好者可以增强防御能力，抵御这些可能耗尽数字钱包的复杂攻击。