A cryptocurrency trader has lost more than $12 million worth of Ethereum ($ETH) after mistakenly sending funds to a fraudulent wallet address, in what blockchain data suggests was a successful address...

<div><div>
<p>A cryptocurrency trader has lost more than $12 million worth of Ethereum (<span>$ETH</span>) after mistakenly sending funds to a fraudulent wallet address, in what blockchain data suggests was a successful address-poisoning attack.</p>
<adv/><p>On-chain records show the victim address, identified as 0xd674, had an established pattern of transferring large sums of <span>$ETH</span> to a Galaxy Digital deposit wallet, according to insights shared by <em>Lookonchain</em> on January 31.</p>
<adv/><div>
<div>
<blockquote>
<p>A victim (0xd674) lost 4556 <span>$ETH</span>($12.4M) due to a copy-paste address mistake.<br/><br/>Victim 0xd674 frequently transfers funds to Galaxy Digital via<br/>0x6D90CC…dD2E48.<br/><br/>The attacker generated a poison address with the same first and last 4 characters as Galaxy Digital's deposit address… pic.twitter.com/oXI3exESzE</p>
— Lookonchain (@lookonchain) January 31, 2026</blockquote>
</div>
</div>
<p>This repeated behavior appears to have been exploited by an attacker who generated a malicious address designed to closely resemble Galaxy Digital’s legitimate deposit address, matching the same opening and closing characters.</p>
<p>Transaction history indicates the attacker repeatedly sent small-value transfers to the victim’s wallet over time. </p>
<p>To this end, the dust transactions caused the poisoned address to appear alongside legitimate destinations in the wallet’s recent activity, increasing the likelihood of confusion during future transfers.</p>
<p>Approximately 11 hours before the loss was detected, the trader initiated another Ethereum transfer intended for Galaxy Digital. </p>
<h2>Failure to verify address </h2>
<p>Instead of manually verifying the destination, the address was copied directly from the transaction history. As a result, 4,556 <span>$ETH</span>, valued at around $12.4 million at the time of the transaction, was sent to the attacker-controlled wallet.</p>
<p>Notably, the transfer was executed in a single outbound transaction, with the funds leaving the victim’s wallet immediately and no subsequent corrective transactions recorded. </p>
<p>The poisoned address successfully received the Ethereum, and there has been no indication of recovery efforts or fund reversal, consistent with the irreversible nature of blockchain settlements.</p>
<p>Overall, the incident highlights the growing prevalence of address-poisoning attacks, where malicious actors exploit visual similarities in wallet addresses rather than vulnerabilities in smart contracts or protocols. </p>
<p>Such attacks rely on user error rather than technical exploits, making even experienced traders vulnerable when handling high-value transfers.</p>
<p><strong><em>Featured image via Shutterstock</em></strong></p>

</div></div>

Crypto trader loses over $12 million in ‘painful’ mistake

一名加密貨幣交易員誤將價值超過 1200 萬美元的以太坊 (ETH) 發送到了一個欺詐錢包地址，區塊鏈數據顯示該地址原本是成功的……

<div><div><p>一名加密貨幣交易員因誤將資金髮送到欺詐錢包地址而損失了價值超過 1200 萬美元的以太坊 ( <span>ETH</span> )，區塊鏈數據顯示這是一次成功的地址投毒攻擊。</p><adv/><p>根據<em>Lookonchain</em>於 1 月 31 日分享的見解，鏈上記錄顯示，受害地址（識別為 0xd674）有向 Galaxy Digital 存款錢包轉移大量<span>ETH</span>的既定模式。</p><adv/><div><div><blockquote><p>一名受害者（0xd674）因複製粘貼地址錯誤而損失了 4556<span>美元ETH</span> （1240 萬美元）。<br/><br/>受害者 0xd674 頻繁通過以下方式向 Galaxy Digital 轉賬：<br/> 0x6D90CC…dD2E48。<br/><br/>攻擊者生成了一個惡意地址，其前四個字符和後四個字符與 Galaxy Digital 的存款地址相同…… pic.twitter.com/oXI3exESzE</p> — Lookonchain (@lookonchain) 2026年1月31日</blockquote></div></div><p>這種重複出現的行為似乎被攻擊者利用了，攻擊者生成了一個惡意地址，該地址與 Galaxy Digital 的合法存款地址非常相似，開頭和結尾字符都相同。</p><p>交易記錄顯示，攻擊者曾多次向受害者的錢包發送小額轉賬。</p><p>為此，這些虛假交易導致被汙染的地址與合法目的地一起出現在錢包的近期活動中，增加了未來轉賬時出現混淆的可能性。</p><p>在發現損失前大約 11 小時，該交易員發起了另一筆以太坊轉賬，目標是 Galaxy Digital。</p><h2>地址驗證失敗</h2><p>攻擊者沒有手動驗證收款地址，而是直接從交易記錄中複製了該地址。結果，4556 個<span>以太幣（ETH</span> ）（交易時價值約 1240 萬美元）被髮送到了攻擊者控制的錢包。</p><p>值得注意的是，這筆轉賬是通過一筆單獨的出庫交易完成的，資金立即從受害者的錢包中流出，並且沒有記錄任何後續的更正交易。</p><p>被投毒的地址成功收到了以太坊，並且沒有任何跡象表明會採取恢復措施或撤銷資金，這與區塊鏈結算的不可逆性相符。</p><p>總體而言，該事件凸顯了地址投毒攻擊日益普遍，惡意行為者利用錢包地址的視覺相似性，而不是智能合約或協議中的漏洞。</p><p>此類攻擊依賴於用戶錯誤而非技術漏洞，這使得即使是經驗豐富的交易員在處理高價值轉賬時也容易受到攻擊。</p><p><strong><em>題圖來自 Shutterstock</em></strong></p></div></div>

加密貨幣交易員因“慘痛”失誤損失超過1200萬美元

2026 年投資者面臨的問題已不是 「要不要配置」，而是「配多少，以及通過什麼工具配置 」。

ARK Invest：比特幣的機構化之路

作者： The Economist
編譯： 深潮 TechFlow
---------------------------------------------------------------
深潮導讀： 儘管比特幣價格仍處於 7 萬美元上方，但加密市場正經歷著一場前所未有的“孤獨寒冬”。本文深入剖析了本輪跌勢與以往的不同之處：槓桿清算的連鎖反應、曾被寄予厚望的 ETF 如今淪為砸盤推手，以及最...

比特幣跌穿7萬美元，加密市場的“氛圍感”是如何消失的？

隨著加密貨幣市值上漲，山寨幣也紛紛走高——但專家警告稱，結構性趨勢逆轉仍然難以實現。