Concentrated Withdrawals Can Expose Crypto Users to Address Poisoning

Address-poisoning scams exploit transaction histories to steer crypto users toward a wallet address that resembles the intended destination. The risk may rise when many users withdraw assets from exchanges to personal cold wallets at the same time. Attackers may target public addresses or wallets with recent activity by sending repeated transfers from look-alike addresses. A fake entry can share the first and last four characters with the intended wallet, while clipboard malware may alter an address during copy and paste.