Exploiter Steals $68M Worth of Crypto Through Address Poisoning
The victim was duped by a mimicked 0.05 ether transfer.
Updated May 3, 2024, 2:13 p.m. Published May 3, 2024, 2:07 p.m.
- A user unintentionally sent 1,155 wrapped bitcoin to an exploiter's wallet after being targeted by address poisoning.
- The scam has been confirmed by various blockchain security firms.
A cryptocurrency user has lost $68 million worth of wrapped bitcoin WBTC$109,380.93 after falling victim to an address poisoning exploit, according to blockchain security firm CertiK.
Address poisoning is a technique that involves tricking the victim into sending a legitimate transaction to the wrong wallet address by mimicking the first and last six characters of the true wallet address and depending on the sender to miss the discrepancy in the intervening characters. Wallet addresses can be as long as 42 characters.
In this case, the exploiter mimicked a 0.05 ether {{ETH}} transaction before receiving 1,155 WBTC from the victim.
Security platform Cyvers and blockchain sleuth ZachXBT confirmed that $68 million had been lost to an address poisoning scam.
Crypto investors lost $2 billion to hacks, scams and exploits across decentralized finance (DeFi) in 2023 and an additional $333 million was stolen in the first quarter.
More For You
The Ether Machine Gets $654M ETH Investment From Blockchains’ Jeffrey Berns

Berns’ commitment brings company's ETH holdings to over $2.1 billion as it prepares to go public via a merger later this year.
What to know:
- Digital asset treasury firm The Ether Machine has secured an additional 150,000 ETH in-kind commitment from Blockchains founder Jeffrey Berns.
- The investment boosts the company's total ETH holdings to 495,362, worth approximately $2.16 billion.
- The Ether Machine plans a third fundraising round of at least $500 million, with Citibank leading the effort, CEO Keys told Reuters.