Most people think address poisoning is simple. Here’s what’s really easy to get wrong:
Some token contracts allow transfers of 0 tokens. Attackers can exploit this to create a record that looks like a transfer “from your address,” making it seem as if you sent the funds yourself.
Address poisoning doesn’t require access to your private key or your signature on an authorization. It exploits the habit of copying addresses from transaction records and checking only the first and last few characters.
Before making a large transfer, you can send a small amount first and confirm with the recipient that it arrived before sending the rest.
People who frequently transfer stablecoins and $ETH wallets are more likely to be targeted by address poisoning.
#ETH
You’re responsible for your own risks. I’m just sharing some thoughts.
Some token contracts allow transfers of 0 tokens. Attackers can exploit this to create a record that looks like a transfer “from your address,” making it seem as if you sent the funds yourself.
Address poisoning doesn’t require access to your private key or your signature on an authorization. It exploits the habit of copying addresses from transaction records and checking only the first and last few characters.
Before making a large transfer, you can send a small amount first and confirm with the recipient that it arrived before sending the rest.
People who frequently transfer stablecoins and $ETH wallets are more likely to be targeted by address poisoning.
#ETH
You’re responsible for your own risks. I’m just sharing some thoughts.