PANews reported on October 4 that according to GoPlus Security monitoring, a user lost approximately US$305,000 in DAI due to an "address poisoning" attack. The attacker generates a fake address that is consistent with the prefix and suffix of the victim's expected transfer address, sends a small amount of "dust" funds to the victim, and induces the user to mistakenly copy the fake address from the historical record when transferring money.
GoPlus Security reminds that such attacks have been fully automated, including target discovery, address forgery and money laundering through coin mixers. Users should never copy addresses directly from historical transaction records, be sure to check the complete address and conduct a small test before making large transfers.