According to the latest statistics from security audit agencies, the confirmed losses from various attacks on crypto assets in December amounted to approximately $117.8 million.
Among them, phishing attacks became the biggest threat, resulting in about $93.4 million in funds lost. Even more concerning is that a significant portion of this phishing loss—around $51.8 million—is directly related to address poisoning.
What does this mean? Attackers impersonate legitimate contract addresses to lure users into transferring funds to fake addresses, causing staggering losses. Even in environments with protective mechanisms such as exchanges and wallets, a moment of user negligence can lead to irretrievable funds.
December was a period of frequent attacks. This data serves as a wake-up call for all participants—verifying addresses, exercising caution in interactions, and being wary of unfamiliar links are no longer just suggestions but survival rules.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
13 Likes
Reward
13
4
Repost
Share
Comment
0/400
TokenomicsDetective
· 5h ago
Address poisoning is really brilliant; if you're not careful, you'll be lost.
View OriginalReply0
BridgeNomad
· 5h ago
ngl, the address poisoning vector hitting $51.8m is exactly the kind of exploit postmortem we should be obsessing over... seen this play out too many times already tbh. trust assumptions breaking down at the user level, every single time 🤦
Reply0
retroactive_airdrop
· 5h ago
This data makes my scalp tingle, over 100 million just disappeared in a month...
Address poisoning is really hard to prevent, I've started copying and pasting three times.
Phishing attempts will probably continue, I need to develop a habit to watch out for it.
December was really intense, I feel I need to re-evaluate my operational procedures.
Watching the numbers evaporate right before my eyes, this alarm bell really hurts.
View OriginalReply0
BrokenDAO
· 6h ago
Basically, human nature always collapses before technical defenses. Address poisoning is essentially a test of user self-discipline. And what’s the result? Year after year, the same tricks are used to harvest the same naive users. No matter how much protection exchanges and wallets add, they can't prevent that瞬间 of greed or negligence—this is the fundamental flaw of the incentive mechanism.
According to the latest statistics from security audit agencies, the confirmed losses from various attacks on crypto assets in December amounted to approximately $117.8 million.
Among them, phishing attacks became the biggest threat, resulting in about $93.4 million in funds lost. Even more concerning is that a significant portion of this phishing loss—around $51.8 million—is directly related to address poisoning.
What does this mean? Attackers impersonate legitimate contract addresses to lure users into transferring funds to fake addresses, causing staggering losses. Even in environments with protective mechanisms such as exchanges and wallets, a moment of user negligence can lead to irretrievable funds.
December was a period of frequent attacks. This data serves as a wake-up call for all participants—verifying addresses, exercising caution in interactions, and being wary of unfamiliar links are no longer just suggestions but survival rules.