Beware! Users' 50 million USDT fall victim to address poisoning scams, with similar starting and ending characters as the "killer move"

【ChainNews】The SlowMist Security Team recently exposed a serious wallet address attack incident. A user encountered an address “poisoning” trap during a fund transfer, ultimately losing nearly 50 million USDT.

The incident unfolded as follows: The user followed the usual procedure, first sending a small amount of USDT to the target address for testing. After confirming the receipt was normal, they prepared to transfer a large sum. But at this critical point, a problem occurred—when copying the address from the transaction record, the user accidentally copied a forged malicious address. How cunning was this fake address? The first 3 characters and the last 4 characters were identical to the real address, but the middle part had been tampered with.

Within a few minutes, $50 million was sent to a wallet controlled by the attacker. This method exploits the psychological vulnerability that users find it difficult to verify each character when copying and pasting. This incident also serves as a reminder to everyone: when making large transfers, never rush; always verify the complete address multiple times, or use safer methods such as scanning QR codes or official links to confirm the recipient.