- Copy-paste scams can cost millions; always double-check crypto addresses before sending funds.
- Victim wallet actively used DeFi, including Compound and WBTC, showing complex crypto activity doesn’t prevent scams.
- Micro-transactions and zero-ETH transfers often signal testing or contract calls, not real fund movements.
A recent $12.4 million Ethereum loss has sent shockwaves through the crypto community. The victim, wallet 0xd674, mistakenly sent 4,556 ETH to a malicious “poison” address mimicking Galaxy Digital’s deposit address.
Lookonchain reported that the attacker generated an address with the same first and last four characters as Galaxy Digital’s official address. Consequently, the victim copied the wrong address directly from their transaction history, unknowingly sending millions to the attacker. Security firm Cyvers Alerts confirmed, “Our systems detected a $12.3M ETH address poisoning attack approximately more than one hour ago.”
This incident highlights a growing threat in crypto: copy-paste scams. The victim’s wallet had frequently transferred funds to Galaxy Digital via 0x6D90CC…dD2E48. However, the poison address—0x6d9052b2…34e592e48—lured the transaction. Cyvers Alerts noted the initial poisoning occurred 37 hours earlier, emphasizing the attack’s stealthy planning. Analysts warn that convenience-driven habits, like copying addresses from transaction history, can have catastrophic consequences.
Wallet Activity Reveals Active DeFi Usage
On-chain records show 0xd6..A7Da has been actively interacting with multiple Ethereum protocols. Inbound transfers included micro-ETH amounts, ranging from 0.00000001 to 0.0000005 ETH, likely used for wallet activity checks or automated contract interactions. Some transactions were zero-ETH transfers, signaling contract calls rather than fund movements.
Meanwhile, outbound activity shows strategic DeFi engagement. About 17–19 hours ago, the wallet executed several multicall transactions to Morpho’s Bundler contract. These bundled actions optimized complex DeFi interactions while incurring notable gas fees.
Additionally, the wallet interacted with Compound’s USDC market, performing supply and withdrawal operations. The wallet also transferred assets to Wrapped Bitcoin (WBTC), signaling exposure to tokenized Bitcoin within Ethereum’s ecosystem.
