Forta logo
Forta, a blockchain threat-detection network.Credit: Official brand assetAll image credits

Address poisoning relies on a lookalike address appearing in a wallet’s history, often through a tiny or zero-value transfer. The attacker hopes the user copies that entry later.

Verify the complete destination

Do not trust only the first and last few characters displayed in a history list. Compare the full address with a trusted source and use an address book when available.

For an important transfer, confirm the network and destination independently and consider a small test payment before sending the remainder.

Transaction history can be deliberately misleading

An attacker sends a small or zero-value transfer from a lookalike address so it appears near a legitimate entry. Copying from history can select the attacker’s address.

Verify the complete address through a trusted source

Checking only the first and last characters is not sufficient. Compare the full destination or use a previously verified address-book entry and a small test transfer when appropriate.

Sources

  1. Ethereum.org — Security and scam prevention