GoPlus: A user lost approximately $305,000 DAI due to a address poisoning attack

According to GoPlus Security monitoring, a user lost approximately $305,000 DAI due to an "address poisoning" attack. The attacker generated fake addresses that matched the prefix and suffix of the victim's expected transfer address, sending small "dust" amounts to the victim to induce them to mistakenly copy the fake address from their transaction history during the transfer.

GoPlus Security reminds users that such attacks have become fully automated, including target discovery, address forgery, and money laundering through mixers. Users should never copy addresses directly from their transaction history; they must verify the complete address and conduct a small test transfer before making large transactions.