Quick answer: Address poisoning uses a look-alike wallet address to manipulate transaction history. Never copy a destination from a recent transfer alone. Compare the full address, use a verified address book and send a small test amount before a large transfer.Wallet interfaces often shorten addresses, which makes the first and last characters look familiar even
Quick answer: Address poisoning uses a look-alike wallet address to manipulate transaction history. Never copy a destination from a recent transfer alone. Compare the full address, use a verified address book and send a small test amount before a large transfer.
Wallet interfaces often shorten addresses, which makes the first and last characters look familiar even when the middle is completely different.
How the attack works
An attacker creates an address that resembles one a victim has used. A tiny transfer or token event can appear in the wallet history. Later, the victim copies that address believing it belongs to a known recipient.
Protection checklist
- Compare the full address from a trusted source.
- Use an address book with a verification process.
- Confirm the network and asset before sending.
- Test with a small amount for a new recipient.
- Do not trust a token transfer merely because it appears in history.
What to do after a mistake
Blockchain transfers are usually irreversible. Save the transaction hash, contact the recipient through a verified channel and report the address to the relevant explorer or platform. Never pay a stranger who promises guaranteed recovery.
FAQ
Does address poisoning require a wallet hack?
No. The attacker can create a confusing transaction without controlling the victim’s wallet.
Are hardware wallets enough?
They protect signing keys, but the user can still approve a transfer to the wrong address.
