GoPlus monitoring: User loses approximately in an address-poisoning attack 305000 USD DAI
BIBIBI
AT A GLANCE
GoPlus Security said that a user lost approximately in an address-poisoning attack 305000 USD DAI。
Article
GoPlus: A user lost approximately 305000 USD DAI
PANews October 4 According to news monitored by GoPlus Security, a user lost approximately 305000 USD DAI. The attacker generated a fake address with the same prefix and suffix as the address the victim expected to transfer to, then sent a small amount of “dust” funds to the victim, inducing the user to mistakenly copy the fake address from their transaction history when making a transfer. GoPlus Security warns that such attacks have become fully automated, including target discovery, address spoofing, and laundering funds through mixers. Users should never copy addresses directly from transaction history, must verify the full address, and should conduct a small test transfer before making a large transfer.
According to GoPlus Security monitoring, a user lost approximately in an “address-poisoning” attack 305000 USD DAI。
03
The attacker generated a fake address with the same prefix and suffix as the address the victim expected to transfer to, and sent a small amount of “dust” funds to the victim.
04
The report said the inducement involved having the user mistakenly copy the fake address from their transaction history when making a transfer.
05
GoPlus Security said that such attacks have achieved full automation of target discovery, address spoofing, and laundering funds through mixers.
06
GoPlus Security reminds users not to copy addresses directly from transaction history, but to verify the full address and conduct a small test transfer before making a large transfer.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
Address poisoning uses visually similar fake addresses to interfere with transaction records. The attacker first sends a small amount of funds, causing the fake address to appear in the user’s transaction history; if the user then copies the address directly, they may transfer funds to the attacker.
Why it matters to readers
The incident shows that checking only the beginning and end of an address may not be sufficient to prevent an erroneous transfer; addresses in transaction history should not be regarded as trustworthy by default.
Before transferring, verify the full address segment by segment. For a large amount, first send a small amount and confirm that it arrives at the correct address before proceeding with the subsequent transfer.
Risks and unknowns
The original text does not provide the victim’s address, transaction hash, or the original GoPlus Security monitoring link.
The loss amount and attack attribution cannot yet be independently verified based on the provided materials.
The original text does not disclose the attacker’s address or the specific flow of funds.
Related Developments
Loading event timeline…
Related concepts
Address poisoning
A fraudulent tactic in which an attacker sends a small transaction to a wallet containing a fake address that resembles a frequently used address, tricking the user into copying it and inadvertently transferring funds.
