May 22, 2023
What is Address Poisoning Attack, how to use it and how to deal with it?Â
In this article you will learn:
What it is?
- Address Poisoning Attack - what is it? In short, this is a type of scam (deception), when a fraudster replaces the recipient's wallet address with his fake address. The transaction is created from the attacker's wallet, but the sender's wallet becomes the victim's address. Since, when working with wallet addresses, an ordinary user pays attention mainly to the first or last 4 characters, in theory it becomes an easy prey for such frauds.
Why is this needed?
- This is necessary first of all in order to earn money, albeit not in a completely honest way. We live in an amazing time, where every minute counts, and time is money. People don't want to waste time checking the addresses they have on their "Recent" lists. This is what you can use.
How to use it and what is needed for this?
Consider the example of the popular cryptocurrency wallet Metamask
- Example: Somehow we find out about a wallet that often makes transfers to another wallet address. We go to this site:
- After that, we generate an address with identical first characters of the wallet, to which user transfers often come
- conditionally, victim address: 0x10A9dA4A84e1ADEa48b56e668B3l49a7B8nbFCfC1337
- knowing the last 4 characters, we can generate our own unique address, which we will use to fake a transfer from it to the victim's wallet.
- We enter a Suffix identical to the victim's wallet and press start.
- After that, at the bottom we see the address of the generated wallet, as well as PrivateKey, with which we can log in to the wallet.
How to protect yourself and not get caught on the hook?
- Always try to check when and how many coins are sent to your wallet. This usually happens with sums less than 0.00+.
- Check addresses several times so as not to accidentally send savings to the left wallet
- It is worth remembering that these addresses can be very similar to yours.
- Do not copy addresses, and even more so do not transfer money from the "Recent" list in your wallets. These may be fake wallets, despite the fact that the first and last 4 characters are identical to yours.
In conclusion, I would like to say that the article was written for informational purposes, and does not aim to popularize scam. Remember that there is no fairness and honesty on our Internet. Everyone earns as he can and sees fit.