Crypto trader loses $50 million in address poisoning attack, offers $1 million bounty for return

A crypto trader lost approximately $50 million in USDT after falling victim to an address poisoning attack following a withdrawal from Binance. The scammer created a lookalike wallet address, differing only in obscured middle characters, which the victim mistakenly used for the large transfer after sending a small test transaction. The attacker quickly laundered the funds by swapping USDT for DAI and then converting it to ETH, depositing most of it into Tornado Cash. In response, the victim sent an onchain message offering a $1 million bounty for 98% of the assets back, stating they have filed a criminal case and gathered actionable intelligence. This incident highlights the growing threat of address poisoning attacks, which security experts suggest could be mitigated by wallet interface warnings, and occurs amid record crypto thefts exceeding $3.4 billion in 2025.

(Source：The Block)