Ethereum hit by address-poisoning attack, $740K stolen from 1.5M wallets
Ethereum wallets have been targeted in a widespread address-poisoning spam attack that has polluted transaction histories for over 1.5 million addresses. Attackers have extracted about $740,000 so far, with the biggest confirmed individual loss at $510,000. The campaign appears designed to trick users into interacting with malicious addresses or fake tokens that lead to unauthorized approvals and drain events.
The episode underscores persistent risks from social-engineered spam on-chain and the limits of passive wallet protections. Users are advised to avoid interacting with unfamiliar tokens or links, check and revoke suspicious approvals, and follow guidance from wallet providers. The incident may prompt exchanges and wallet developers to increase on-screen warnings and blacklist known malicious addresses as the community seeks faster mitigations against similar large-scale contamination campaigns.