Jameson Lopp Warns Bitcoin Users Of ‘Address Poisoning’

48K Suspicious Transactions

Lopp highlighted a surge in attacks where fraudsters mimic wallet addresses, a malpractice which has become even easier through AI. An 18-month blockchain study identified nearly 48,000 suspicious transactions, with some victims losing significant funds.

The CSO explained that these attacks are only economically viable during low-fee periods on Bitcoin’s blockchain. He described them as a form of social engineering, as the attackers generate fake addresses similar to those a victim has used recently, then deposit a small amount of crypto into the address.

Source: X (@mononautical)

The attackers then “poison” the victim’s transaction history by transferring these funds into the real wallet. Victims may then unknowingly copy the spoofed address from their history.

Advice For Bitcoin Users

Lopp’s findings showed that the first such attacks occurred in July 2023, with more frequent bursts from December 2023 onward. Interestingly, over 12,000 targeted addresses had never spent funds, and most had received fewer than 10 deposits.

Lopp cautioned Bitcoin holders not to trust addresses from transaction history and advised against reusing addresses. “Don’t rely on memory or recent transactions, and definitely avoid reusing addresses for security reasons,” he urged.