Ethereum Address Poisoning Attacks Steal $740K After Fusaka

Recent record network activity on Ethereum could be linked to a wave of address poisoning attacks that are taking advantage of low gas fees since December, said security researcher Andrey Sergeenkov.

Cointelegraph reported on Friday that network activity retention nearly doubled to 8 million addresses in a month, while daily transactions hit an all-time high of almost 2.9 million.

The week starting Jan. 12 saw 2.7 million new addresses, 170% higher than typical values, while daily transactions surged to over 2.5 million, said Sergeenkov.ย 

However, Sergeenkov said the uptick could be due to a type of mass spam attack known as โ€œaddress poisoning,โ€ which has become more economical after the December Fusaka Ethereum network upgrade cut transaction fees.

Network fees fell more than 60% in the weeks that followed the upgrade in early December.

โ€œAddress poisoning has become disproportionately attractive for attackers,โ€ said the researcher, adding: โ€œyou can’t scale infrastructure without addressing user security first!โ€ย 

$740,000 lost in address poisoning attacksย 

Address poisoning involves scammers sending small transactions from wallet addresses that resemble legitimate ones, duping users into copying the wrong address when making a transaction.

The scammers first send small amounts of money, usually stablecoins, to โ€œdust distributorโ€ addresses.

Sergeenkov said he was able to uncover likely dust distributor addresses by looking at the number of wallets that received less than a dollar as their first stablecoin transaction.

Related: Efforts to bulletproof Ethereum are paying off in user metrics

Then, to identify which of these are โ€œdust distributorโ€ addresses, he looked at only those that sent transactions out to more than 10,000 addresses.

โ€œThese poisoning addresses then distribute dust to millions of potential victims, creating false entries in transaction histories.โ€

Some of the top โ€œdust distributorsโ€ sent to more than 400,000 recipients, and so far, more than $740,000 has been stolen this way from 116 victims, he said.ย 

Top contract addresses distributing dust to bait addresses. Source: Andrey Sergeenkov

Magazine: Indians slam Pudgy Penguins, ex-digital yuan bossโ€™s crypto scandal: Asia Express