Crypto Influencer Sillytuna Loses $24M in Address Poisoning Scam — How It Happened

Crypto influencer Sillytuna recently lost about $24 million, primarily in aEthUSDC, due to a highly sophisticated address-poisoning scam that occurred on March 5th. The attack exploited human habits by using look-alike wallet addresses and sending small 'dust' transactions to insert the malicious address into the victim's transaction history. When Sillytuna copied an address from their history, the funds were sent to the attacker, who quickly converted the assets into ETH and then DAI. The incident is notable not just for the scale of the loss, but because Sillytuna reported receiving real-world threats afterward, leading them to decide to leave the cryptocurrency industry entirely. Address poisoning relies on users copying addresses from transaction histories, where attackers generate vanity addresses mimicking legitimate ones. Security experts advise users to avoid copying addresses from history, verify entire addresses, use saved address books, and send small test transactions first to mitigate this persistent phishing threat.

(Source：CCN)