Jameson Lopp sounds alarm on Bitcoin address poisoning attacks

Key Points

  • Jameson Lopp, chief security officer at Casa, warns about Bitcoin address poisoning attacks.
  • Threat actors generate BTC addresses that mimic the first and last digits of addresses from a victim's transaction history.
  • Over 18 months, nearly 48,000 transactions were identified as potential address poisoning attacks.
  • Lopp urges Bitcoin holders to thoroughly check addresses before sending funds and calls for better wallet interfaces.

Summary

Jameson Lopp, the chief security officer at Bitcoin custody company Casa, has raised concerns about Bitcoin address poisoning attacks, a type of social engineering scam where attackers create Bitcoin addresses that closely resemble those in a victim's transaction history to deceive them into sending funds to malicious addresses. Lopp's analysis of the Bitcoin blockchain revealed that these attacks started appearing in July 2023, with regular bursts occurring until January 2025, followed by a brief hiatus. Over this period, nearly 48,000 transactions were identified as potential address poisoning attempts. Lopp emphasized the importance of verifying addresses before transactions and advocated for improved wallet interfaces to display addresses fully. This warning comes amidst a backdrop of increasing cybersecurity threats in the crypto industry, with significant losses reported due to various scams and hacks, including a notable $1.4 billion loss from the Bybit hack in February 2025, attributed to North Korean hackers employing sophisticated social engineering tactics.

cointelegraph
April 7, 2025
Crypto
Read article

Related news