Exploiter Steals $68M Worth of Crypto Through Address Poisoning
Summary
A cryptocurrency user lost $68 million in wrapped bitcoin (WBTC) due to an address poisoning exploit, as reported by blockchain security firm CertiK. Address poisoning involves tricking a victim into sending a transaction to an incorrect wallet address by mimicking the first and last six characters of the actual wallet address. The exploiter in this case mimicked a 0.05 ether (ETH) transaction before receiving 1,155 WBTC from the victim. Security platform Cyvers and blockchain investigator ZachXBT confirmed the loss. In 2023, crypto investors lost $2 billion to hacks, scams, and exploits in decentralized finance (DeFi), with an additional $333 million stolen in the first quarter.
