Skip to content

Ethereum Losses $50M from Copy-Paste Error

User Loses Nearly $50 Million in USDt Due to Address Poisoning Scam

  • A user lost approximately 49,999,950 USDt (USDT) after sending funds to a scam address.
  • The loss occurred due to an address poisoning attack, where a malicious wallet address was copied from the victim’s transaction history.
  • The victim initially sent a small test transaction to the correct address before mistakenly transferring the full amount minutes later.
  • Security experts noted that the similarity between the actual and scam addresses was subtle enough to deceive experienced users.
  • After the theft, the attacker converted stolen USDt into Ether (ETH) and moved it into multiple wallets, including Tornado Cash.

This incident highlights the risks associated with address poisoning scams, which exploit human behavior rather than technical vulnerabilities. In recent years, cryptocurrency hacks have resulted in significant financial losses, underscoring ongoing security challenges in the industry.

In total, crypto-related hacks accounted for $3.4 billion in losses this year alone, with this single incident representing one of the largest individual losses at nearly $50 million in USDt.(Source)

Share