GoPlus Security says user lost about $305,000 in DAI in address poisoning attack

A user lost about $305,000 in DAI after falling victim to an address poisoning attack, according to monitoring by GoPlus Security. The attacker created a fake wallet address with the same prefix and suffix as the address the victim intended to use, then sent a small dust transaction to make that address appear in the victim’s transaction history. The setup was designed to trick the user into copying the wrong address from past records during a later transfer. GoPlus Security said this type of attack has already been automated across the full chain, including target discovery, address forgery and money laundering through mixers. The security firm warned users not to copy wallet addresses directly from transaction history, to verify the full address before sending funds, and to run a small test transfer before making a large transaction.