{"id":64592,"date":"2025-12-21T15:09:00","date_gmt":"2025-12-21T15:09:00","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=64592"},"modified":"2025-12-21T15:09:00","modified_gmt":"2025-12-21T15:09:00","slug":"crypto-user-loses-50m-usdt-in-address-poisoning-attack-details","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=64592","title":{"rendered":"Crypto User Loses $50M USDT In Address Poisoning Attack \u2013 Details"},"content":{"rendered":"<div>\n<p>An unsuspecting crypto user has recently lost $50 million USDT in an address poisoning scam. The incident represents one of the largest on-chain losses in 2025, drawing reactions from crypto security experts as new developments on the matter roll in.\n<\/p>\n<h2><strong>Copy-Paste Mistake Costs User 50M USDT<\/strong><\/h2>\n<p>Address poisoning is a scam in which an attacker sends small transactions from a wallet address that closely resembles a victim\u2019s legitimate address, hoping the victim will later copy the wrong address from their transaction history and unknowingly send funds to the attacker.<\/p>\n<p>Blockchain security page, Web3 Antivirus <a href=\"https:\/\/x.com\/web3_antivirus\/status\/2002043421368693140?s=20\" target=\"_blank\" rel=\"noopener nofollow\">reports<\/a> that a crypto user recently fell victim to this scam, sending 49,999,950 USDT to a poisoned address copied from transaction history. Considering the large transaction, the user had tried taking caution by sending a small test transaction to the correct address. However, the nature of address poisoning requires close monitoring, where attackers are able to immediately send dust transactions from wallets resembling the intended address.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/pbs.twimg.com\/media\/G8iuJMfWYAAXWYA?format=jpg&amp;name=large\" alt=\"Address Poisoning\" width=\"1668\" height=\"728\"><\/p>\n<p>Cos, founder of fellow security platform Slowmist, <a href=\"https:\/\/x.com\/evilcos\/status\/2002182610584506428?s=20\" target=\"_blank\" rel=\"noopener nofollow\">provided<\/a> valuable insights on this operation, noting the similarity between both addresses, which shared the same first 3 characters and last 4 characters. The victim unknowingly picked the poisoned address from the transaction history to complete the $50 million, thus marking one of the biggest on-chain individual losses of 2025.\u00a0<\/p>\n<p>More data from Web3 Antivirus reveals that the victim wallet has been active on-chain for approximately two years and is primarily used for USDT transfers. The stolen $50 million was also initially withdrawn from Binance before the scam occurred. Notably, the stolen USDT has since been converted to ETH by the attackers and shared among multiple wallets, who have also funneled some of the loot through Tornado Cash.\n<\/p>\n<h2><b>Address Poisoning Victim Offers Bounty With 48-Hour Ultimatum<\/b><\/h2>\n<p>In other news, blockchain investigator Specter Analyst reports that the victim has attempted to establish communication with the attackers via an on-chain message.\u00a0<\/p>\n<p>According to an <a href=\"https:\/\/x.com\/SpecterAnalyst\/status\/2002289872707465681?s=20\" target=\"_blank\" rel=\"noopener nofollow\">X post<\/a> on December 20, the victim claims to have filed a criminal complaint case while also enlisting the relevant law enforcement, cybersecurity, and blockchain protocols to provide needed intelligence on the scammer\u2019s activities. Furthermore, all six addresses associated with the heist are now under constant surveillance. However, the aggrieved party is offering the perpetrators of the address poisoning a peaceful resolution, which involves the willing return of 98% of the loot to a specified address within 48 hours.\n<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/pbs.twimg.com\/media\/G8mQA-_XwAAbJEy?format=jpg&amp;name=large\" alt=\"Address Poisoning\" width=\"1220\" height=\"1902\"><\/p>\n<p>Notably, the victim will allow the bad actors to keep $1 million as a bug bounty for spotting such a vulnerability in their operations. However, they warn that failure to accept the amicable offer within the stipulated time will result in legal escalation of the matter to international law enforcement authorities. They further warn that the attackers\u2019 identities will be revealed and shared with the relevant agencies to aid their arrest and persecution. At press time, total crypto losses in 2025 have <a href=\"https:\/\/www.chainalysis.com\/blog\/crypto-hacking-stolen-funds-2026\/\" target=\"_blank\" rel=\"noopener nofollow\">surpassed<\/a> $3.4 billion, underscoring the need for continually strengthened security measures within the thriving ecosystem.\u00a0<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.tradingview.com\/x\/QYlxx4IL\/\" alt=\"Address Poisoning\" width=\"1564\" height=\"926\"><\/div>\n","protected":false},"excerpt":{"rendered":"<p>An unsuspecting crypto user has recently lost $50 million USDT in an address poisoning scam. The incident represents one of the largest on-chain losses in 2025, drawing reactions from crypto security experts as new developments on the matter roll in. Copy-Paste Mistake Costs User 50M USDT Address poisoning is a scam in which an attacker [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-64592","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/64592","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=64592"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/64592\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=64592"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=64592"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=64592"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}