Address Poisoning and Private Key Leaks Still Hit Hard

[nihalsari]

Despite the overall decline, December still saw devastating single-user losses. One victim lost $50 million to an address poisoning scam, where attackers create look-alike wallet addresses that trick users into sending funds to the wrong destination. Another incident involved a $27.3 million loss due to a private key leak in a multisignature wallet setup.

These attacks highlight a persistent reality of crypto security: many of the largest losses don’t come from sophisticated protocol failures, but from social engineering, poor key management, or rushed transactions. Even experienced users remain vulnerable when safeguards are skipped.

[ed]

50 million still hurts probs