Exploiter Steals $68M Worth of Crypto Through Address Poisoning

https://www.coindesk.com/business/2024/05/03/exploiter-steals-68m-worth-of-crypto-through-address-poisoning/

The victim was duped by a mimicked 0.05 ether transfer.

Updated May 3, 2024, 2:13 p.m. Published May 3, 2024, 2:07 p.m.

  • A user unintentionally sent 1,155 wrapped bitcoin to an exploiter's wallet after being targeted by address poisoning.
  • The scam has been confirmed by various blockchain security firms.

A cryptocurrency user has lost $68 million worth of wrapped bitcoin (WBTC) after falling victim to an address poisoning exploit, according to blockchain security firm CertiK.

Address poisoning is a technique that involves tricking the victim into sending a legitimate transaction to the wrong wallet address by mimicking the first and last six characters of the true wallet address and depending on the sender to miss the discrepancy in the intervening characters. Wallet addresses can be as long as 42 characters.

In this case, the exploiter mimicked a 0.05 ether ETH$2,926.40 transaction before receiving 1,155 WBTC from the victim.

Security platform Cyvers and blockchain sleuth ZachXBT confirmed that $68 million had been lost to an address poisoning scam.

Crypto investors lost $2 billion to hacks, scams and exploits across decentralized finance (DeFi) in 2023 and an additional $333 million was stolen in the first quarter.

More For You

State of the Blockchain 2025

State of the Blockchain 16:9

L1 tokens broadly underperformed in 2025 despite a backdrop of regulatory and institutional wins. Explore the key trends defining ten major blockchains below.

What to know:

2025 was defined by a stark divergence: structural progress collided with stagnant price action. Institutional milestones were reached and TVL increased across most major ecosystems, yet the majority of large-cap Layer-1 tokens finished the year with negative or flat returns.

This report analyzes the structural decoupling between network usage and token performance. We examine 10 major blockchain ecosystems, exploring protocol versus application revenues, key ecosystem narratives, mechanics driving institutional adoption, and the trends to watch as we head into 2026.

View Full Report

More For You

Tensions over El Salvador's bitcoin holdings ease as IMF praises economic progress

The National Palace in San Salvador, El Salvador.

The Central American country’s economy is projected to grow 4% this year, the IMF said.

What to know:

  • The IMF praised El Salvador's stronger-than-expected economic growth and progress in bitcoin-related discussions.
  • El Salvador's real GDP growth is projected to reach around 4%, with a positive outlook for 2026.
  • Despite previous IMF recommendations, El Salvador continues to increase its bitcoin holdings, adding over 1,000 BTC during November's market downturn.

Read full story

{
"by": "gulced",
"descendants": 0,
"id": 40248755,
"score": 2,
"time": 1714749898,
"title": "Exploiter Steals $68M Worth of Crypto Through Address Poisoning",
"type": "story",
"url": "https://www.coindesk.com/business/2024/05/03/exploiter-steals-68m-worth-of-crypto-through-address-poisoning/"
}
{
"author": "Oliver Knight",
"date": "2024-05-03T14:13:48.835Z",
"description": "A cryptocurrency user has lost $68 million worth of wrapped bitcoin (WBTC) after falling victim to an “address poisoning” exploit, according to blockchain security firm CertiK.",
"image": "https://cdn.sanity.io/images/s3y3vcno/production/6923046d9a52fac72269f7dd0d26ff84da658711-3240x1823.jpg?auto=format&w=960&h=540&crop=focalpoint&fit=clip&q=75&fm=jpg",
"logo": null,
"publisher": "CoinDesk",
"title": "Exploiter Steals $68M Worth of Crypto Through Address Poisoning",
"url": "https://www.coindesk.com/business/2024/05/03/exploiter-steals-68m-worth-of-crypto-through-address-poisoning"
}
{
"url": "https://www.coindesk.com/business/2024/05/03/exploiter-steals-68m-worth-of-crypto-through-address-poisoning",
"title": "Exploiter Steals $68M Worth of Crypto Through Address Poisoning",
"description": "The victim was duped by a mimicked 0.05 ether transfer.Updated May 3, 2024, 2:13 p.m. Published May 3, 2024, 2:07 p.m. A user unintentionally sent 1,155 wrapped bitcoin to an exploiter's wallet after being...",
"links": [
"https://www.coindesk.com/business/2024/05/03/exploiter-steals-68m-worth-of-crypto-through-address-poisoning",
"https://www.coindesk.com/business/2024/05/03/exploiter-steals-68m-worth-of-crypto-through-address-poisoning/"
],
"image": "https://cdn.sanity.io/images/s3y3vcno/production/6923046d9a52fac72269f7dd0d26ff84da658711-3240x1823.jpg?auto=format&w=960&h=540&crop=focalpoint&fit=clip&q=75&fm=jpg",
"content": "<div><h2>The victim was duped by a mimicked 0.05 ether transfer.</h2><p><span>Updated May 3, 2024, 2:13 p.m. </span><span>Published May 3, 2024, 2:07 p.m. </span></p></div><div><ul><li>A user unintentionally sent 1,155 wrapped bitcoin to an exploiter's wallet after being targeted by address poisoning.</li><li>The scam has been confirmed by various blockchain security firms.</li></ul><hr /><p>A cryptocurrency user has lost $68 million worth of wrapped bitcoin (WBTC) after falling victim to an address poisoning exploit, according to <a href=\"https://twitter.com/CertiKAlert/status/1786378165050306774\" target=\"_blank\">blockchain security firm CertiK</a>.</p><p>Address poisoning is a technique that involves tricking the victim into sending a legitimate transaction to the wrong wallet address by mimicking the first and last six characters of the true wallet address and depending on the sender to miss the discrepancy in the intervening characters. Wallet addresses can be as long as 42 characters.</p><p>In this case, the exploiter mimicked a 0.05 ether <span><a target=\"_blank\" href=\"https://www.coindesk.com/price/ethereum\"><span><span><span>ETH</span><span><svg height=\"24\" width=\"24\"></svg></span><span>$2,926.40</span></span></span></a></span> transaction before receiving 1,155 WBTC from the victim.</p><p>Security platform <a href=\"https://twitter.com/CyversAlerts/status/1786363410243858869\" target=\"_blank\">Cyvers</a> and blockchain sleuth <a href=\"https://t.me/investigations/114\" target=\"_blank\">ZachXBT</a> confirmed that $68 million had been lost to an address poisoning scam.</p><p>Crypto investors <a target=\"_blank\" href=\"https://www.coindesk.com/tech/2023/12/27/crypto-users-lost-2b-to-hacks-scams-and-exploits-in-2023-defi-says/\">lost $2 billion to hacks</a>, scams and exploits across decentralized finance (DeFi) in 2023 and an additional <a target=\"_blank\" href=\"https://www.coindesk.com/video/crypto-lost-dollar333m-to-hacks-in-q1-of-2024-immunefi/\">$333 million was stolen</a> in the first quarter.</p></div><div><p>More For You</p><div><div><p>State of the Blockchain 2025</p></div><div><figure><img alt=\"State of the Blockchain 16:9\" srcset=\"https://www.coindesk.com/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fs3y3vcno%2Fproduction%2F3bce6808e0dce5712c3eb9f7c3209f92e4b003e4-3840x2160.jpg%3Fauto%3Dformat&amp;w=1920&amp;q=75 1x, https://www.coindesk.com/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fs3y3vcno%2Fproduction%2F3bce6808e0dce5712c3eb9f7c3209f92e4b003e4-3840x2160.jpg%3Fauto%3Dformat&amp;w=3840&amp;q=75 2x\" src=\"https://www.coindesk.com/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fs3y3vcno%2Fproduction%2F3bce6808e0dce5712c3eb9f7c3209f92e4b003e4-3840x2160.jpg%3Fauto%3Dformat&amp;w=3840&amp;q=75\" /></figure><p>L1 tokens broadly underperformed in 2025 despite a backdrop of regulatory and institutional wins. Explore the key trends defining ten major blockchains below.</p><div><p>What to know: </p><div><p>2025 was defined by a stark divergence: structural progress collided with stagnant price action. Institutional milestones were reached and TVL increased across most major ecosystems, yet the majority of large-cap Layer-1 tokens finished the year with negative or flat returns.</p><p>This report analyzes the structural decoupling between network usage and token performance. We examine 10 major blockchain ecosystems, exploring protocol versus application revenues, key ecosystem narratives, mechanics driving institutional adoption, and the trends to watch as we head into 2026.</p></div></div><p><a target=\"_blank\" href=\"https://www.coindesk.com/research/state-of-the-blockchain-2025\">View Full Report<svg width=\"21\" height=\"21\"></svg></a></p></div></div></div><div><p>More For You</p><div><p>Tensions over El Salvador's bitcoin holdings ease as IMF praises economic progress</p><figure><img alt=\"The National Palace in San Salvador, El Salvador.\" srcset=\"https://www.coindesk.com/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fs3y3vcno%2Fproduction%2F9f195591155260513f2dde4d7d16b86db8c8c793-1920x1080.jpg%3Fauto%3Dformat&amp;w=1920&amp;q=75 1x, https://www.coindesk.com/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fs3y3vcno%2Fproduction%2F9f195591155260513f2dde4d7d16b86db8c8c793-1920x1080.jpg%3Fauto%3Dformat&amp;w=3840&amp;q=75 2x\" src=\"https://www.coindesk.com/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fs3y3vcno%2Fproduction%2F9f195591155260513f2dde4d7d16b86db8c8c793-1920x1080.jpg%3Fauto%3Dformat&amp;w=3840&amp;q=75\" /></figure><p>The Central American country’s economy is projected to grow 4% this year, the IMF said.</p><div><p>What to know: </p><div><ul><li>The IMF praised El Salvador's stronger-than-expected economic growth and progress in bitcoin-related discussions.</li><li>El Salvador's real GDP growth is projected to reach around 4%, with a positive outlook for 2026.</li><li>Despite previous IMF recommendations, El Salvador continues to increase its bitcoin holdings, adding over 1,000 BTC during November's market downturn.</li></ul></div></div><p><a target=\"_blank\" href=\"https://www.coindesk.com/business/2025/12/23/tensions-over-el-salvador-s-bitcoin-holdings-ease-as-imf-praises-economic-progress\">Read full story<svg width=\"21\" height=\"21\"></svg></a></p></div></div>",
"author": "@coindesk",
"favicon": "https://www.coindesk.com/favicons/production/favicon-32x32.png",
"source": "coindesk.com",
"published": "2024-05-03t14:07:07.117z",
"ttr": 76,
"type": "newsarticle"
}