#大户持仓动态 【Urgent Reminder】Be cautious with large transfers; a single mistake can teach you a lesson worth millions

Recently, I came across a shocking case: a major institution accidentally lost 50 million USDT to a phishing scam. The root cause was simply copying the address directly from transaction records.

**How does the scam work?**

The entire scheme is quite old-fashioned, but executed very ruthlessly:

The victim first withdrew 50 million USDT from a large exchange, carefully testing the transfer with 50 USDT. The scammer then targeted this—generated an address that matches the first and last three characters of the target address exactly, and sent 0.005 USDT into it. Seeing this latest transaction in the records, the victim copied the address without much thought and used it to transfer funds.

In just one move, 50 million USDT ended up in the scammer’s pocket.

**The subsequent steps are even more desperate**

After getting the money, the scammer knew how to handle it. Immediately exchanged all 50 million USDT for DAI (to prevent freezing), then bought 16,624 ETH in one go. Finally, these ETH were mixed through Tornado to launder the funds. The entire process was so fast that there was almost no room for operation.

Case-related addresses (for reference only):
- Victim: 0xcB80784ef74C98A89b6Ab8D96ebE890859600819
- Phisher: 0xBaFF2F13638C04B10F8119760B2D2aE86b08f8b5

**A painful lesson**

Next time you transfer large amounts, don’t be lazy—either manually type the address character by character or use the address book feature in your wallet. Copying from transaction records? That’s like sending money directly. $BTC $ETH Be especially careful with transfers of large cryptocurrencies; phishing scammers love to target high-value targets.