@nafis360
Yesterday, someone lost 1.1M, falling victim to an Address poisoning attack. And it’s more common than people think, in fact, if you check Debank, you’ll probably see your own address getting hit every few days
There are mainly two types of poisoning:
Active poisoning, where the attacker sends dust amount from an address that closely resembles one you’ve interacted with.
Log poisoning, where no funds move. A malicious contract emits fake transfer events that explorers display as history.
Now in both cases, the attacker aims to get into your transaction history and, more importantly, recent address suggestions.
The idea is that in a moment of urgency, you might grab that familiar looking address and send funds to them, thinking it’s your own address. And this is exactly what happened in yesterday's incident.
So the moral is, don't always trust your wallet's suggested addresses, even if the beginning and ending characters match. Always use copy paste and fully verify address before sending funds.