BlockBeats Warns Against Address Poisoning Attacks During Concentrated Withdrawal Periods
BIBIBI
AT A GLANCE
BlockBeats reminder:Binance Following the phased restoration of withdrawals, users should be alert to inducement by similar addresses and fully verify withdrawal addresses.
Article
Security Alert: Users should beware of "address poisoning" attacks during periods of concentrated withdrawals
BlockBeats reported,November 2, following the largest theft in crypto history,Binance the platform, at Beijing time November 1, 2026 at 14, began restoring withdrawal services in phases. After withdrawal channels reopened, some users chose to transfer assets from the platform to personal cold wallets in pursuit of more autonomous custody.
However, the concentrated withdrawal period after withdrawals reopen is often a high-incidence window for Address Poisoning attacks. Attackers intensively send "poisoning transactions" to public addresses or addresses with recent transfer records. The forged addresses used in these transactions closely resemble users' real addresses in several characters at the beginning and end (commonly, the first and last characters are identical), with the aim of inducing users, when acting in haste, to mistakenly copy an incorrect address from wallet transaction history, or to have middle characters replaced by clipboard malware on an infected device.
BlockBeats reminds users that when initiating withdrawals from trading platforms, they should manually verify all 42 hexadecimal 16 characters of the destination address in full. It is recommended to conduct at least to independent checks and avoid relying on autofill from transaction history, recent transaction lists, or system clipboard contents.
Original link https://m.theblockbeats.info/flash/374913
Key points
01
BlockBeats stated that Binance the platform began restoring withdrawal services in phases at Beijing time November 1, 2026 on 14.
02
The article states that some users transferred assets from the platform to personal cold wallets after withdrawal channels reopened.
03
The article states that attackers may intensively send “poisoning transactions” to public addresses or addresses with recent transfer records.
04
The article states that several characters at the beginning and end of forged addresses may closely resemble those of real addresses; commonly, the first and last characters are identical.
05
BlockBeats recommends that users manually verify all 42 hexadecimal 16 characters of the destination address in full and conduct at least to independent checks.
06
BlockBeats recommends avoiding reliance on autofill from transaction history, recent transaction lists, or system clipboard contents.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
“Address poisoning” is a method that uses similar addresses to mislead transferors. Attackers send transactions so that forged addresses appear in wallet records; if users look only at the beginning and end of an address or directly copy transaction history, they may transfer assets to an incorrect address. The article also mentions that clipboard malware on an infected device may replace middle characters in an address.
Why it matters to readers
If a withdrawal address is misled by a similar address or clipboard contents, assets may be sent to an incorrect address. This content is a risk alert and does not confirm that an address poisoning attack or loss has occurred.
When making withdrawals, beginners should not verify only the beginning and end of an address, nor should they directly trust transaction history or the clipboard; as recommended in the article, they should fully verify the destination address multiple times.
Risks and unknowns
The article does not provide Binance an official announcement regarding the restoration of withdrawals.
The article does not provide cases of address poisoning attacks or asset losses that have already occurred.
The article does not provide affected addresses, transaction records, or other on-chain evidence.
The specific incident, amount, and basis for “the largest theft in crypto history” are not explained in the article.
Related Developments
Loading event timeline…
Related concepts
Address Poisoning
This term is not in the glossary yet. Browse related concepts in the glossary.
