Someone just lost $50,000,000 to a single copy-paste mistake.
Here’s how it happened:
• The victim sent 50 USDT as a test transaction.
• A scammer instantly deployed a spoofed wallet matching the same first and last characters.
• Because most wallets truncate addresses with “…”, the fake address looked legit.
The victim later copied the address from their transaction history, not realizing it was the attacker’s.
Moments later, 49,999,950 USDT was sent directly to the scammer.
Gone.
This is called an address poisoning attack, and it works because people only check the beginning and end of an address.
Hard lesson:
Never reuse addresses from transaction history.
Always verify the full address before sending every single time.
One copy-paste. $50M vanished.
