A cryptocurrency trader has lost more than $12 million worth of Ethereum ($ETH) after mistakenly sending funds to a fraudulent wallet address, in what blockchain data suggests was a successful address...

<div><div>
<p>A cryptocurrency trader has lost more than $12 million worth of Ethereum (<span>$ETH</span>) after mistakenly sending funds to a fraudulent wallet address, in what blockchain data suggests was a successful address-poisoning attack.</p>
<adv/><p>On-chain records show the victim address, identified as 0xd674, had an established pattern of transferring large sums of <span>$ETH</span> to a Galaxy Digital deposit wallet, according to insights shared by <em>Lookonchain</em> on January 31.</p>
<adv/><div>
<div>
<blockquote>
<p>A victim (0xd674) lost 4556 <span>$ETH</span>($12.4M) due to a copy-paste address mistake.<br/><br/>Victim 0xd674 frequently transfers funds to Galaxy Digital via<br/>0x6D90CC…dD2E48.<br/><br/>The attacker generated a poison address with the same first and last 4 characters as Galaxy Digital's deposit address… pic.twitter.com/oXI3exESzE</p>
— Lookonchain (@lookonchain) January 31, 2026</blockquote>
</div>
</div>
<p>This repeated behavior appears to have been exploited by an attacker who generated a malicious address designed to closely resemble Galaxy Digital’s legitimate deposit address, matching the same opening and closing characters.</p>
<p>Transaction history indicates the attacker repeatedly sent small-value transfers to the victim’s wallet over time. </p>
<p>To this end, the dust transactions caused the poisoned address to appear alongside legitimate destinations in the wallet’s recent activity, increasing the likelihood of confusion during future transfers.</p>
<p>Approximately 11 hours before the loss was detected, the trader initiated another Ethereum transfer intended for Galaxy Digital. </p>
<h2>Failure to verify address </h2>
<p>Instead of manually verifying the destination, the address was copied directly from the transaction history. As a result, 4,556 <span>$ETH</span>, valued at around $12.4 million at the time of the transaction, was sent to the attacker-controlled wallet.</p>
<p>Notably, the transfer was executed in a single outbound transaction, with the funds leaving the victim’s wallet immediately and no subsequent corrective transactions recorded. </p>
<p>The poisoned address successfully received the Ethereum, and there has been no indication of recovery efforts or fund reversal, consistent with the irreversible nature of blockchain settlements.</p>
<p>Overall, the incident highlights the growing prevalence of address-poisoning attacks, where malicious actors exploit visual similarities in wallet addresses rather than vulnerabilities in smart contracts or protocols. </p>
<p>Such attacks rely on user error rather than technical exploits, making even experienced traders vulnerable when handling high-value transfers.</p>
<p><strong><em>Featured image via Shutterstock</em></strong></p>

</div></div>

Crypto trader loses over $12 million in ‘painful’ mistake

一名加密货币交易员误将价值超过 1200 万美元的以太坊 (ETH) 发送到了一个欺诈钱包地址，区块链数据显示该地址原本是成功的……

<div><div><p>一名加密货币交易员因误将资金发送到欺诈钱包地址而损失了价值超过 1200 万美元的以太坊 ( <span>ETH</span> )，区块链数据显示这是一次成功的地址投毒攻击。</p><adv/><p>根据<em>Lookonchain</em>于 1 月 31 日分享的见解，链上记录显示，受害地址（识别为 0xd674）有向 Galaxy Digital 存款钱包转移大量<span>ETH</span>的既定模式。</p><adv/><div><div><blockquote><p>一名受害者（0xd674）因复制粘贴地址错误而损失了 4556<span>美元ETH</span> （1240 万美元）。<br/><br/>受害者 0xd674 频繁通过以下方式向 Galaxy Digital 转账：<br/> 0x6D90CC…dD2E48。<br/><br/>攻击者生成了一个恶意地址，其前四个字符和后四个字符与 Galaxy Digital 的存款地址相同…… pic.twitter.com/oXI3exESzE</p> — Lookonchain (@lookonchain) 2026年1月31日</blockquote></div></div><p>这种重复出现的行为似乎被攻击者利用了，攻击者生成了一个恶意地址，该地址与 Galaxy Digital 的合法存款地址非常相似，开头和结尾字符都相同。</p><p>交易记录显示，攻击者曾多次向受害者的钱包发送小额转账。</p><p>为此，这些虚假交易导致被污染的地址与合法目的地一起出现在钱包的近期活动中，增加了未来转账时出现混淆的可能性。</p><p>在发现损失前大约 11 小时，该交易员发起了另一笔以太坊转账，目标是 Galaxy Digital。</p><h2>地址验证失败</h2><p>攻击者没有手动验证收款地址，而是直接从交易记录中复制了该地址。结果，4556 个<span>以太币（ETH</span> ）（交易时价值约 1240 万美元）被发送到了攻击者控制的钱包。</p><p>值得注意的是，这笔转账是通过一笔单独的出库交易完成的，资金立即从受害者的钱包中流出，并且没有记录任何后续的更正交易。</p><p>被投毒的地址成功收到了以太坊，并且没有任何迹象表明会采取恢复措施或撤销资金，这与区块链结算的不可逆性相符。</p><p>总体而言，该事件凸显了地址投毒攻击日益普遍，恶意行为者利用钱包地址的视觉相似性，而不是智能合约或协议中的漏洞。</p><p>此类攻击依赖于用户错误而非技术漏洞，这使得即使是经验丰富的交易员在处理高价值转账时也容易受到攻击。</p><p><strong><em>题图来自 Shutterstock</em></strong></p></div></div>

加密货币交易员因“惨痛”失误损失超过1200万美元

贝莱德亚太区iShares主管尼古拉斯·皮奇表示，即使在亚洲，对加密货币进行适度的投资组合配置也可能推动大量资金流入市场。

他在Consensus大会的一个小组讨论会上发表了上述言论……

贝莱德高管表示，亚洲地区1%的加密货币配置可释放2万亿美元的新资金流入。

Berachain 的原生代币 $BERA 在 2 月 11 日飙升超过 150%，创下数月以来单日最大涨幅。此前，该项目在 2025 年的大部分时间里都处于低迷状态，而此次上涨行情是在几周的复苏之后出现的。

战略转型提振 BERA，Berachain 飙升 150%。

贝莱德与Uniswap合作，将代币化债券基金引入DeFi领域，推动UNI价格飙升。图片来源：Diaro
贝莱德持续扩展其在去中心化金融（DeFi）领域的布局，此举为……铺平了道路。