An Ethereum user has reportedly lost about $100,000 in an address poisoning attack after copying a wallet address from transaction history without verifying the destination before sending funds.
Blockchain analytics platform Lookonchain flagged the incident, highlighting the continuing risk posed by address poisoning scams, a type of cryptocurrency fraud that exploits the way users identify and copy wallet addresses.
Address poisoning typically involves an attacker generating a wallet address that resembles the address a victim has previously used. The attacker may send a small transaction to the victim’s wallet, causing the malicious address to appear in the transaction history. If the victim later copies an address from that history without checking the complete string, the funds can be sent to the attacker.
The reported $100,000 Ethereum loss demonstrates how a single unchecked wallet address can result in the permanent loss of digital assets, as blockchain transactions generally cannot be reversed once confirmed.
How Address Poisoning Works
The scam relies on human behavior rather than exploiting a technical weakness in the Ethereum network itself. Wallet addresses are long strings of letters and numbers, making it difficult for users to distinguish between legitimate and fraudulent addresses when only a few characters are visible in a wallet interface.
Attackers take advantage of this by creating addresses with similar beginning or ending characters to those associated with a victim’s legitimate wallet. They then attempt to place the deceptive address into the victim’s transaction history.
When the user needs to make another payment, the fraudulent address may appear familiar. If the user copies it instead of retrieving the verified address from a trusted source, the transaction can be directed to the attacker.
The technique can be particularly damaging because users may assume that an address appearing in their transaction history is automatically safe. However, the presence of an address in a transaction record does not establish that it belongs to the intended recipient.
Verification Remains the Key Defense
The latest incident underscores the importance of independently confirming wallet addresses before transferring Ethereum or other digital assets.
Users can reduce their exposure by obtaining recipient addresses directly from a trusted source rather than selecting them from transaction histories. They should also compare the full wallet address before confirming a transaction, particularly when transferring large amounts.
For significant transactions, sending a small test amount before transferring the full balance can provide an additional layer of protection. Users should also consider address-book features offered by some wallets and exchanges, provided the address is verified before being saved.
Address poisoning is everywhere.
Always double-check the wallet address before sending funds, and never copy an address from your transaction history.
Another victim copied a wallet address from the transaction history and sent funds without double-checking, losing $100K!… pic.twitter.com/L2H8K3IpVk
— Lookonchain (@lookonchain) August 13, 2026
Security specialists consistently recommend treating every wallet address as untrusted until it has been independently verified, particularly when a transaction involves a large amount of cryptocurrency.
Growing Risk for Crypto Users
Address poisoning has become a recurring concern as cryptocurrency adoption expands and blockchain transactions remain largely irreversible. Unlike traditional bank transfers, blockchain payments generally do not provide a centralized mechanism for canceling a transaction after it has been finalized.
The incident also illustrates why transaction history should not be treated as an address directory. Even if an address appears to have been used previously, users need to confirm that it belongs to the intended recipient before sending additional funds.
The risk extends beyond Ethereum. Similar address-based scams can affect users across multiple blockchain networks because the underlying attack depends primarily on wallet behavior and user verification practices.
For individuals and businesses holding substantial digital assets, the consequences can be significant. A mistaken transfer to an attacker-controlled wallet may be difficult or impossible to recover, leaving prevention as the most effective safeguard.
The reported incident serves as another warning that cryptocurrency security depends not only on blockchain technology but also on careful transaction practices. Double-checking the destination address and avoiding blind reliance on transaction history can significantly reduce the risk of falling victim to address poisoning attacks.
