CZ proposes wallet protection against address poisoning

Traders Union
All News
Crypto News
CZ proposes wallet protection

Highlights

Address poisoning is emerging as a major crypto threat, with losses accelerating into year end, including a single $50 million USDT theft.
CZ proposes wallet-level defenses as a practical solution, arguing that automatic detection, warnings, and filtering of poisoned addresses can prevent users from interacting with malicious transactions.
Industry-wide adoption of preventive tools could significantly reduce losses.

The proposal comes amid rising concern that existing safeguards have failed to keep pace with increasingly subtle attack methods targeting everyday wallet behavior.

In a public post, Zhao argued that wallet providers should take a more active role in filtering and blocking malicious transactions before users can act on them. “All wallets should simply check if a receiving address is a poison address, and block the user,” Zhao wrote, describing the process as a straightforward blockchain query rather than a complex technical challenge.

Loading...

The tweet was deleted by the author.

But we saved everything 🙂.

How address poisoning works

Address poisoning is a phishing technique in which attackers send small amounts of cryptocurrency to a victim’s wallet from an address designed to closely resemble a legitimate one. Victims who later copy and paste addresses from their transaction history may mistakenly send large sums to the attacker instead.

The method has proven costly. According to Scam Sniffer, 6,344 victims lost more than $7.7 million to phishing scams in November alone. Losses are expected to rise sharply in December, largely due to the recent $50 million USDT theft, which has drawn widespread attention to address poisoning risks.

Security firm CertiK identified phishing as the most damaging crypto scam of 2024, with total losses exceeding $1 billion, and noted that address poisoning is becoming an increasingly common attack vector.

Proposed measures and industry response

Zhao outlined several steps wallets could implement, including warnings for poisoned addresses, blacklists of known malicious accounts, and automatic filtering of low-value spam transactions. He also suggested wallets should avoid displaying such spam transfers altogether, reducing the chance that users interact with them.

Binance security teams have already developed what Zhao described as an “antidote” to address poisoning, using an algorithm that has reportedly identified around 15 million poisoned addresses.

While most victims do not recover stolen funds, rare exceptions underscore the stakes. In May 2024, an attacker returned $71 million stolen via address poisoning after investigators claimed to have traced the scammer’s potential location.

As address poisoning continues to evolve, Zhao’s proposals highlight a broader shift toward preventive security at the wallet level. Whether wallet providers widely adopt these measures may determine how effectively the industry curbs one of its most persistent and costly threats.

Earlier, we reported about attacks on exchanges and wallets: Why 2025 became record year for crypto thieves.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.