A pattern emerging across Ethereum transaction records reveals how automated scam campaigns are exploiting wallet behavior rather than technical vulnerabilitiesA pattern emerging across Ethereum transaction records reveals how automated scam campaigns are exploiting wallet behavior rather than technical vulnerabilities

Etherscan Warns Ethereum Users About Rising Address Poisoning Attacks

2026/03/15 04:23
4 min di lettura
Per feedback o dubbi su questo contenuto, contattateci all'indirizzo [email protected].

A pattern emerging across Ethereum transaction records reveals how automated scam campaigns are exploiting wallet behavior rather than technical vulnerabilities.

Etherscan issued an alert on March 12, 2026, warning that address poisoning attacks are rapidly increasing, with automation allowing attackers to flood user transaction histories with deceptive wallet addresses.

The warning highlights how these attacks rely on social engineering rather than protocol flaws. By inserting lookalike addresses into recent transaction lists, attackers attempt to trick users into copying the wrong destination when sending funds.

Automated Attack Activity Surges After Network Upgrade

According to the warning, the scale of these attacks increased significantly after Ethereum’s Fusaka upgrade, which was activated on December 3, 2025.

The upgrade reduced transaction costs across the network, lowering the barrier for attackers to launch large-scale campaigns. As a result, the number of so-called “dust transfers”, transactions typically worth less than $0.01, has surged across several major stablecoins.

Data referenced in the warning shows:

  • USDT dust transfers increased by 612%
  • USDC dust transfers rose by 473%
  • DAI dust transfers climbed by 470%

These transactions are typically sent by automated bots that monitor blockchain activity in real time. When a legitimate transfer occurs, attackers quickly send a small transaction from a vanity address designed to resemble the correct destination wallet.

Because many users copy addresses from their recent transaction history, the fake address can appear legitimate at a glance.

High-Profile Losses Highlight the Risk

The consequences of these attacks can be significant when victims mistakenly copy a poisoned address.

In early March 2026, a user known as Sillytuna reportedly lost approximately $24 million in aEthUSDC after accidentally transferring funds to a spoofed wallet address.

Security researchers estimate that address poisoning scams have already caused roughly $62 million in losses during the first two months of 2026.

The scale of automated activity can also be intense. One reported victim received 89 automated poisoning alerts within just 30 minutes, triggered after making only two legitimate transfers.

How the Scam Works

Address poisoning relies on the fact that many cryptocurrency wallet interfaces only show the first and last few characters of a long address. Attackers generate vanity addresses that mimic those visible characters so that the fraudulent address appears nearly identical to the correct one.

Once the attacker sends a small transaction from this address, it becomes visible in the victim’s transaction history. If the user later copies the address from that history instead of verifying it manually, funds can be sent directly to the attacker.

Security Measures Recommended by Etherscan

To reduce the risk of falling victim to address poisoning attacks, Etherscan and blockchain security researchers recommend several protective measures.

Users should always verify the full wallet address, rather than relying on the abbreviated format shown in many interfaces. Even a single incorrect character can redirect funds permanently.

Another recommended step is enabling Etherscan’s Address Highlight feature, which visually marks trusted addresses or frequently used wallets to make suspicious ones easier to detect.

Security experts also suggest using Ethereum Name Service (ENS) addresses or wallet address books with private labels. These tools reduce the need to copy addresses from transaction histories where spoofed entries may appear.

Finally, many blockchain explorers now hide zero-value or suspicious dust transfers by default, helping prevent malicious entries from appearing in a user’s recent transaction list.

Growing Threat for Ethereum Users

Address poisoning campaigns demonstrate how attackers increasingly rely on automation and behavioral manipulation rather than direct protocol exploits. As transaction costs fall and network activity expands, the ability to run high-volume scam campaigns becomes easier for malicious actors.

For Ethereum users, the warning underscores a simple but critical habit: always confirm the entire destination address before sending funds, especially when copying it from a transaction history.

The post Etherscan Warns Ethereum Users About Rising Address Poisoning Attacks appeared first on ETHNews.

Disclaimer: gli articoli ripubblicati su questo sito provengono da piattaforme pubbliche e sono forniti esclusivamente a scopo informativo. Non riflettono necessariamente le opinioni di MEXC. Tutti i diritti rimangono agli autori originali. Se ritieni che un contenuto violi i diritti di terze parti, contatta [email protected] per la rimozione. MEXC non fornisce alcuna garanzia in merito all'accuratezza, completezza o tempestività del contenuto e non è responsabile per eventuali azioni intraprese sulla base delle informazioni fornite. Il contenuto non costituisce consulenza finanziaria, legale o professionale di altro tipo, né deve essere considerato una raccomandazione o un'approvazione da parte di MEXC.

Potrebbe anche piacerti

Let insiders trade – Blockworks

Let insiders trade – Blockworks

The post Let insiders trade – Blockworks appeared on BitcoinEthereumNews.com. This is a segment from The Breakdown newsletter. To read more editions, subscribe ​​“The most valuable commodity I know of is information.” — Gordon Gekko, Wall Street Ten months ago, FBI agents raided Shayne Coplan’s Manhattan apartment, ostensibly in search of evidence that the prediction market he founded, Polymarket, had illegally allowed US residents to place bets on the US election. Two weeks ago, the CFTC gave Polymarket the green light to allow those very same US residents to place bets on whatever they like. This is quite the turn of events — and it’s not just about elections or politics. With its US government seal of approval in hand, Polymarket is reportedly raising capital at a valuation of $9 billion — a reflection of the growing belief that prediction markets will be used for much more than betting on elections once every four years. Instead, proponents say prediction markets can provide a real service to the world by providing it with better information about nearly everything. I think they might, too — but only if insiders are free to participate. Yesterday, for example, Polymarket announced new betting markets on company earnings reports, with a promise that it would improve the information that investors have to work with.  Instead of waiting three months to find out how a company is faring, investors could simply watch the odds on Polymarket.  If the probability of an earnings beat is rising, for example, investors would know at a glance that things are going well. But that will only happen if enough of the people betting actually know how things are going. Relying on the wisdom of crowds to magically discern how a business is doing won’t add much incremental knowledge to the world; everyone’s guesses are unlikely to average out to the truth. If…
Condividi
BitcoinEthereumNews2025/09/18 05:16
Middle East War Cancels F1 Races and Disrupts Crypto Events in Dubai

Middle East War Cancels F1 Races and Disrupts Crypto Events in Dubai

TLDR TOKEN2049 Dubai has been postponed to April 2027 and TON Gateway Dubai canceled due to Middle East conflict F1 officially canceled the Bahrain (April 12) and
Condividi
Coincentral2026/03/15 15:44
Remittix Presale Edges Closer To Sell Out As Only $6 Million Remains

Remittix Presale Edges Closer To Sell Out As Only $6 Million Remains

Interest in the best crypto presale opportunities is rising as investors search for projects that combine strong demand with clear utility. Many early-stage launches
Condividi
Captainaltcoin2026/03/15 15:30