Gate News: On March 13, Etherscan issued a security warning. A user received 89 malicious transactions within 30 minutes after making two stablecoin transfers. The address poisoning attacker monitored blockchain activity, created fake addresses with highly similar starting and ending characters to addresses the user had interacted with, and sent nearly worthless small transfers to these fake addresses. This caused the fake addresses to appear in the user’s transaction history, tricking the user into copying the attacker’s address in subsequent transfers. Etherscan recommends users always verify the full recipient address before transferring and use its address highlighting feature to distinguish similar addresses.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Curve Finance 預防性暫停 LayerZero 跨鏈,CRV 及 crvUSD 橋接受限
Curve Finance has been attacked over LayerZero infrastructure related to rsETH, and has temporarily suspended cross-chain functionality to prevent risk, impacting CRV cross-chain bridging and the fast bridging of crvUSD. Founder Egorov said the incident demonstrates the risk of “non-isolated lending,” and proposed a fully isolated mode as an alternative. Kelp DAO also suffered losses of about $292 million due to the attack, affecting lending activity on the Aave platform.
MarketWhisper14m ago
A Kelp bridge hack spreads and affects Aave, as TVL plunges and bad debt surges to 196 million
Liquidity re-staking protocol Kelp’s cross-chain bridge was attacked, stealing 116,500 rsETH and depositing it into Aave V3, resulting in roughly $196 million in bad debt. Aave’s contracts were not affected, but the incident revealed the systemic risk of LRT collateral, prompting DeFi protocols to re-evaluate their risk models, which could lead to losses for stkAAVE holders.
MarketWhisper19m ago
Third-party AI breaches Vercel; Orca urgently rotates the key and confirms the agreement is secure
Decentralized exchange Orca announced that it has completed key rotation and confirmed that users’ funds are safe. This was done because the cloud platform Vercel was attacked. The attack method used a third-party AI tool’s OAuth integration to enter the Vercel system. A supply-chain vulnerability made it difficult for traditional security measures to be detected. Vercel reminded users to review environment variables to strengthen security protections, and noted that encryption projects’ reliance on cloud infrastructure creates a new security risk.
MarketWhisper49m ago
Pause the Reserve agreement for eUSD and USD3 minting; the redemption function remains fully enabled
The Reserve agreement was paused on April 20 for the minting of eUSD and USD3 and the RSR redemption and withdrawal operations due to the Kelp DAO rsETH attack event, but the redemption function remains operational. The attack caused a liquidity crisis at Aave, deposits dropped significantly, and the price of AAVE tokens fell.
MarketWhisper59m ago
Orca Responds to Vercel Security Incident: Frontend Credentials Rotated, On-Chain Funds Unaffected
Orca, the Solana liquidity protocol, addressed a security incident at its hosting provider, Vercel, by rotating compromised keys. They confirmed that user funds were unaffected and will provide updates as the situation evolves.
GateNews1h ago
Kelp DAO Bridge Exploit Results in $293M Mint, Leaves Aave With Over $200M in Bad Debt
An attacker exploited a vulnerability in Kelp DAO's cross-chain bridge, stealing $293 million in unbacked rsETH. The incident caused significant losses for DeFi platforms, with Aave facing up to $236 million in bad debt and substantial impacts on the market.
GateNews7h ago