A user lost nearly 50 million USDT due to a "address poisoning" attack involving similar starting and ending characters.

PANews reported on December 20 that SlowMist founder Cosine tweeted that a user suffered from an address “poisoning” attack involving similar starting and ending characters, resulting in a loss of nearly 50 million USDT. X user @web3_antivirus stated that the user first sent a small test transaction to the correct address. A few minutes later, 50 million USD was sent to a malicious address copied from the transaction history (with the same first 3 and last 4 characters).

• Player address: 0xcB80784ef74C98A89b6Ab8D96ebE890859600819
• Poisoning address: 0xBaFF2F13638C04B10F8119760B2D2aE86b08f8b5
• Expected player address: 0xbaf4b1aF7E3B560d937DA0458514552B6495F8b5