A copy‑and‑paste error cost one trader $600,000 after an address poisoning attack on Feb. 17, 2026. The loss highlights persistent wallet‑address spoofing risks and the irreversibility of on‑chain transfers.