I recently came across a very typical phishing case where a major account lost 50 million USDT. Here's what happened—this whale user withdrew 50 million USDT from a top-tier exchange to their own wallet, and not long after, they started doing transfer tests. The attacker was quick and generated a phishing address with the same ending digits, then sent 0.005 USDT to the whale's address to deceive.

The whale, being careless, copied the address directly from the transaction record, then transferred 50 million USDT in two transactions to this fake address. By the time they realized, it was too late. Later, the funds were converted into ETH through a series of operations, then sent to Tornado Cash for mixing, essentially resulting in a total loss.

This case serves as an important reminder: never be lazy and copy addresses directly from transaction records when transferring assets. Always double-check the address, preferably by manual input or obtaining it from official channels. Phishing techniques are becoming more sophisticated; a small mistake can lead to losses of tens of millions. Everyone must be cautious and verify carefully when transferring assets—this is no small matter.