On April 9, an unknown user lost $386,000 in USDT after copying an address from their transaction history. The address turned out to be fake, planted in advance by attackers. The incident was recorded by the Web3 Antivirus service, which also tracked the movement of the funds.
The attack followed a simple but effective scheme: scammers placed a lookalike address in the victim’s transaction history. It matched the real one only in the first and last characters. The user copied the wrong address and sent 386,300 USDT directly to the attackers.
The funds were routed through an intermediary wallet and converted into DAI and ETH. About $190,000 in DAI remains untouched — the wallet has already received the maximum toxic score in the Web3 Antivirus system. Out of the 90 ETH obtained during the swap, 80 coins are still inactive. The remaining 10 ETH were moved further — reportedly into Tornado Cash.
Read also: