Copy-Paste Error Costs User Nearly $50M in USDT
On Dec. 20, 2025, a user lost nearly $50 million denominated in USDT after unknowingly pasting a poisoned wallet address that had been stored in their transaction history. The mistake — a subtle form of address spoofing — shows how small, hard-to-detect alterations to copied addresses can trick experienced users and drain large sums in seconds.
The case underscores ongoing threats from clipboard and address-manipulation attacks and the need for stronger UX and safeguards in wallets and exchanges. For users and providers alike, the incident is a reminder to adopt verification steps and safer practices; at the same time it raises pressure on platforms to build automated checks that catch spoofed or out-of-pattern addresses before funds move.