Tron wallet providers get called out as address poisoning attacks spread
Fifteen victims have been drained of a combined $9.4 million over the past four weeks by a single address poisoning operator.
On-chain investigator Specter (@SpecterAnalyst) flagged the losses on August 27. The stolen balances were swapped into USDD, a Tron-based stablecoin, then funneled to one consolidation wallet.
How do address poisoning scams work?
A single scammer has stolen $9.4 million from 15 victims on the Tron network over the past four weeks using a simple trick called “address poisoning,” according to on-chain investigator Specter, who posts as “SpecterAnalyst” on X.
The two biggest victims lost $2.5 million each. The stolen funds were swapped into USDD, a stablecoin on Tron, and moved to one main wallet.
Analyst Stacy Muur (@stacy_muur) explained on August 26 that address poisoning begins when an attacker sends tiny amounts of crypto from fake addresses that look almost identical to real ones the victims have used before. These transactions are called dust transactions.
When users copy these fake addresses from their transaction history, they send their money straight to the thief instead of the intended recipient.
… Continue reading the full article at the original source below.
