A user encountered a "poisoning" attack with addresses having similar starting and ending characters, resulting in a loss of nearly 50 million USDT.

PANews December 20 News, SlowMist founder Yu Xian tweeted that a user was targeted by a “poisoning” attack involving addresses with similar starting and ending characters, resulting in a loss of nearly 50 million USDT. X user @web3antivirus stated that the user first sent a small test transaction to the correct address. A few minutes later, 50 million dollars were sent to a malicious address copied from the transaction record (the first 3 characters and last 4 characters are the same).

Player address: 0xcB80784ef74C98A89b6Ab8D96ebE890859600819 Poisoning address: 0xBaFF2F13638C04B10F8119760B2D2aE86b08f8b5 Expected address: 0xbaf4b1aF7E3B560d937DA0458514552B6495F8b5