HTX investigates small “mystery” crypto deposits after community links them to the exchange HTX said on Aug. 18 it is probing a wave of small cryptocurrency deposits that community members have been attributing to the exchange — deposits some users have labeled “address poisoning.” In an initial internal review, HTX said its official channels did not originate the transfers or run any related tests. The exchange is now tracing the transactions’ origin and examining whether third‑party address labeling or attribution methods created a misleading link to HTX. What triggered the alert Community users circulated screenshots showing tiny deposits that appeared to come from addresses labeled as exchange‑linked. One widely reported example involved 7.5 USDT arriving in a Coinbase account; the recipient was reportedly later asked to explain the source of the funds. Coinbase has not publicly confirmed that case, and no affected user has published a complete platform notice proving a permanent restriction tied to the transfer. HTX emphasized that a request for information is not the same as a frozen account. What HTX has (and hasn’t) disclosed - HTX says it “has not conducted any related transfers or testing activities.” - The exchange did not identify the blockchain, the sending addresses or transaction hashes. - HTX has not said how many recipients reported deposits or whether any customer assets were at risk. - The company warned it will not speculate and will provide confirmed information when its investigation concludes, but gave no deadline. Address poisoning: what it is — and what still needs proving “Address poisoning” typically means an attacker creates an address that looks like one previously used by a target, sends a tiny transaction so the lookalike address appears in the target’s history, and then hopes the victim later copies it without checking every character. Chainalysis and other security guides describe this technique as transaction‑history manipulation. But small unsolicited transfers alone do not prove poisoning. Investigators need to establish: - whether the sender actually resembled a trusted counterparty, and - whether the transfer was intended to manipulate a recipient’s transaction history. So far there’s no verified evidence that any recipients later sent funds to lookalike addresses or that losses resulted from these disputed deposits. No security researcher has publicly tied the transfers to a specific operator. By contrast, a separate confirmed incident — previously reported — involved a user who lost 100,000 USDT after copying a planted lookalike address. Why attribution is hard onchain Blockchain explorers and analytics firms assign labels to addresses based on disclosed ownership, transaction patterns and clustering. Those heuristics can be useful leads but are not definitive proof that a named exchange authorized a transfer. Deposit addresses, consolidation wallets, payment processors and intermediaries can all muddy attribution. HTX said its probe will explicitly review “address tagging” and onchain source identification, leaving open the possibility a third‑party service misattributed the sender to HTX. Broader context: compliance screening and reported account blocks The reports come amid wider worries about automated compliance systems. Earlier coverage showed users experiencing blocked transactions and frozen funds after compliance tools flagged exposure to HTX‑linked addresses; those earlier restrictions related to sanctions screening and do not demonstrate a link to the current small‑value deposits. Claims that accounts were “frozen” over the disputed transfers remain unverified — no exchange has confirmed imposing restrictions because of these deposits, and no platform notices, case numbers or affected wallet addresses have been published. What HTX needs to do next To enable outside verification, investigators say HTX should identify the sending addresses, establish who controlled them and publish transaction hashes so independent analysts can test the exchange attribution and search for lookalike address patterns. Practical advice for users Until investigations clarify the situation, users should: - avoid copying destination addresses from transaction histories, - verify full addresses (not shortened displays), - use saved address books where available, and - preserve transaction hashes or platform notices for support teams. Interacting with unsolicited tokens or unfamiliar contracts can create separate security risks. HTX says it will share further findings once confirmed but has not announced a timeline or said whether it will publish a technical report. We’ll update this story as HTX or independent researchers publish more details. Read more AI-generated news on: undefined/news