This article emphasizes address poisoning attacks, and sheds light on how you can safeguard yourself from such attacks.<\/p>\n
What is Address Poisoning Attack?<\/h2>\n
Address poisoning or address spoofing is a deceptive tactic wherein scammers send bits of cryptocurrencies to a wallet owner using a fake address resembling the victim’s. The owner, misled by the resemblance, unknowingly sends funds to the scammer’s address.<\/p>\n
This is a ploy to trick you into sending your assets to the scammer’s address.<\/strong><\/p>\n Interestingly, unlike other types of crypto scams, like phishing attacks<\/a>, these do not involve sophisticated tech or malware<\/a>.<\/p>\n They are not limited to any specific wallet. From Bitcoin wallets<\/a> to multi-chain wallets, anyone can be targeted.<\/p>\n Address poisoning attacks follow a simple mechanism with and heavily rely on users\u2019 negligence.<\/p>\n Here is how scammers plan this notorious sting.<\/p>\n Blockchains being transparent and public in nature allows everyone to have access to the transactions carried out by wallet addresses, and scammers keep an eye on the addresses that frequently make transactions<\/strong> or addresses that hold a lot of crypto assets<\/strong>.<\/p>\n Crypto wallet addresses being a combination of alphanumerics that are as long as 64 characters in length are very difficult to memorize. Often, while making transactions, users only cross-check the first and last four digits of the wallet address.<\/p>\n Scammers, being well aware of this behavior, generate a crypto wallet address using tools like Vanity ETH<\/a> whose alphanumeric string closely resembles your or your friends wallet addresses.<\/p>\n Eg. Your friends address<\/strong> \u2192 0x11\u2026\u2026\u2026\u202673BF | Fake address <\/strong>\u2192 0xb1\u2026\u2026\u2026\u202673bF<\/p>\n Once the scammer has set up a near-identical wallet address, they plot the trap and send a near-zero amount of cryptocurrency to the target address. This leaves your transaction history \u201cpoisoned\u201d.<\/p>\n Now your wallet’s transaction history is full of the scammer’s identical wallet address.<\/p>\n Post poisoning, the scammers now wait for you to make a transaction to your friend’s address. They hope that you unknowingly copy and paste the scammers address from the transaction history.<\/p>\n Users\u2019 negligence to check all the characters before making the transaction enables the scam\u2019s success.<\/p>\n If, due to negligence, a user sends his\/her funds out to the phony address, it would be too late to recover the funds by the time they realize their mistake.<\/p>\n Peter, a cryptocurrency enthusiast living in the neighborhood is a long-term trader and has a substantial amount of funds lying in his wallet and regularly sends crypto to his good friend John with wallet address (0x1223\u2026..0987).<\/p>\n Scammers keep a close eye on Peter\u2019s transaction activities through a blockchain explorer.<\/p>\n They then use tools like vanity-eth.tk to create a fake address (0x1233\u2026..0987) showing similarity to John\u2019s address.<\/p>\n Having set up a similar address the scammer then sends bits of cryptocurrencies to Peter\u2019s address filling up his transaction history with the fake address, causing address poisoning.<\/p>\n Peter is oblivious to this and sends crypto to John as per usual \u2014 just copy-pasting from what he thought was John\u2019s address from a previous transaction.<\/p>\n Peter realizes that he has been scammed when John tells him he never got his money.<\/p>\n In this scenario, the scammers win due to Peter\u2019s negligence.<\/p>\n Mark, an active trader, is well known for making money via cryptocurrency arbitrage, Mark actively transfers funds between multiple cryptocurrency exchanges to get the best deals.<\/p>\n Keeping note of Mark’s daily activities, scammers target Mark and his wallet address following which scammers employ a fake token contract and send bits of the phony token to the victim. The fake tokens are always a counterfeit of popular cryptocurrencies like USDT or USDC.<\/p>\n The scammer then executes a transaction utilizing the \u201ctransferFrom\u201d function of this fake token contract, making it seem as if the target’s address is transferring 0 tokens to the recipient (the scammer\u2019s address).<\/p>\n This tactic is employed in the hope that the target will duplicate the most recent recipient’s address, under the false belief that they have previously engaged in a transaction with this address.<\/p>\n Mark, being lazy to scan his wallet address each time while arbitrage trading, copy\/pastes the scammers address mistaking that for his address from the previously made transaction.<\/p>\n In this scenario, mask loses his funds.<\/p>\n Address poisoning attacks may result in the following:<\/p>\n Address poisoning attacks highlight the need for vigilance and security measures to protect the global blockchain industry against such scams.<\/p>\n Address poisoning attacks could result in hefty financial losses. Follow these methods in order to safeguard yourself from these blockchain attacks.<\/p>\n Make sure to cross-check the \u2018complete\u2019 wallet address (alphanumeric strings) before proceeding with your transactions.<\/p>\n Refrain from copying\/pasting wallet addresses from the transaction history as they may have been poisoned with fake\/phony addresses. Instead, manually enter it or ask the other party for their address each time.<\/p>\n Use NFT domain names like those from ENS or Unstoppable domains. They are easy to read, memorize, and triple-check.<\/p>\n When managing cryptocurrencies, always make sure to choose the best cryptocurrency wallets such as Paybis.<\/p>\n Paybis is a non-custodial cryptocurrency wallet that provides you with a safe and intuitive cryptocurrency storage\/trade experience.<\/p>\n Always be sure to make a test transaction with a smaller amount of token\/crypto just to make sure you have sent the amounts to the right crypto address.<\/p>\nHow Do They Work?<\/h2>\n
![\"How](\"https:\/\/paybis.com\/blog\/wp-content\/uploads\/2023\/11\/How-Does-Address-Poisoning-Attack-Work.jpg\")
<\/picture><\/p>\nStep 1: Pick the Target<\/h3>\n
Step 2: Generate Fake Addresses<\/h3>\n
![\"Fake](\"https:\/\/paybis.com\/blog\/wp-content\/uploads\/2023\/11\/Fake-address-example.jpg\")
<\/picture><\/p>\nStep 3: Address Poisoning<\/h3>\n
Step 4: Trap the Victim<\/h3>\n
\nUseful links<\/h2>\n
\n
\nExamples of Address Poisoning Attacks:<\/h2>\n
Scenario 1 \u2013 Address Poisoning Attack Targeting the Average Joe<\/h3>\n
Scenario 2 \u2013 Address Poisoning Attack via Fake Smart Contracts<\/h3>\n
Result of address poisoning attacks<\/h2>\n
\n
Safeguard Yourself From Address Poisoning Attacks<\/h2>\n
Cross-check your wallet address<\/h3>\n
Avoid copying\/pasting addresses<\/h3>\n
Use NFT domains<\/h3>\n
Choose reputed wallets<\/h3>\n
Make test transactions<\/h3>\n
Address books\/contacts<\/h3>\n