$50M Lost in a Single Address Poisoning Mistake

[tradelikepro]

A single slip cost a crypto user nearly $50 million in USDt this year. The victim fell prey to an address poisoning scam, where a malicious wallet was inserted into their transaction history.

Even seasoned users can be fooled — the attacker’s address mirrored the original, matching the first 3 and last 4 characters. After sending a small test transaction to the correct address, the victim accidentally sent the full transfer to the scammer.

The stolen funds were quickly converted to Ether and partially moved through Tornado Cash, highlighting the ongoing sophistication of onchain theft.

Crypto hacks totaled $3.4 billion in 2025, with just three massive incidents making up nearly 70% of the losses — this one alone is a stark reminder that even tiny errors can be devastating.

[JanEmil]

Many ways to loss. I sent to contract address a few times. Also stupid

[Capybara_Capybara]

One copy-paste mistake, lifetime lesson.

[The_Walking_Dead]

Test tx saved nothing — verification matters.

[Revenant]

Address poisoning is silent but brutal.