In a recent tweet, Shiba Inu team member Lucie shared a security notice for the SHIB community. Attackers have created thousands of lookalike wallet addresses intended to trick Safe Wallet users into sending funds to the wrong destination.
Lucie noted that this was not a protocol exploit, infrastructure breach, smart contract vulnerability nor a system compromise.
While 5,000 malicious addresses have been identified, flagged and are being removed from the Safe Wallet interface to reduce accidental interaction, Lucie urges the Shiba Inu community to take necessary precautions as such schemes are easy to replicate.
Such precautions include always confirming the full address or recipients outside the platform, using an address book or allow list and sending a small test transaction first. This might be essential, especially for high-value transfers.
HOT Stories
Crypto Market Review: $500,000,000 in XRP Buying Volume, Shiba Inu (SHIB) Surprisingly Bullish, Will Bitcoin (BTC) Be Saved Before $50,000?
Bitcoin (BTC): Fidelity Identifies $65K as ‘Attractive Entry Point’
What happened?
On Feb. 6, Safe Labs shared a security update with the crypto community, noting a large-scale address poisoning and social engineering campaign targeting multisig users.
A total of 5,000 addresses have been flagged as malicious via SafeShield (powered by its security partners) and are being removed from Safe Wallet’s UI, reducing the risk of accidental interaction.
Address poisoning and social engineering, like phishing, are becoming a growing threat in the crypto market.
In a recent incident, a crypto user lost $50 million due to a copy-paste address mistake. Before transferring 50 million USDT, the victim had sent 50 USDT as a test to his own address. The scammer immediately spoofed a wallet with the same first and last four characters and performed an address poisoning attack.
Since many wallets hide the middle part of the address with “…” to make the UI look better, many users often copy the address from transaction histories and usually only check the starting and ending letters. This error caused the user to send the remaining 49,999,950 USDT to the fake address copied from his transaction history.
The lesson in this incident is that of precaution, to always double-check addresses before making a transfer and never to copy addresses from transaction history for convenience.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
