☠️ Address poisoning is a crypto scam built around how wallet addresses are displayed.
When sending cryptoassets, people often copy a recent address from their transaction history and check the first and last few characters rather than the full string.
Attackers place a lookalike address in that transaction history, one that matches those visible characters but differs in the middle. Because wallets shorten addresses in their display, the lookalike can be copied by mistake, sending funds to the attacker.
No private key is exposed and no system is breached. Our new explainer covers how address poisoning works and how you can detect it: