"Address poisoning" is a prevalent tactic among scammers, exploiting the standardized format used by many services to display cryptocurrency addresses. Typically, these addresses are presented as strings starting with a set of characters, followed by an ellipsis, and ending with another set of characters, such as: 0xb3967....46d66.
Scammers exploit this format by crafting addresses that mimic the start and end characters of legitimate addresses users have interacted with before.
So far they have had a lot of success for relative low effort.
We need a better term?
Recommend:
- Use wallets or tools that identify these scams
- NEVER copy an address from history
- Send small test amounts first, when dealing with a lot of funds
- Use @safe msig
ALERTAre we mistaken, or has someone truly lost $68M worth of $WBTC? Our system has detected another address falling victim to address poisoning, losing 1155 $WBTC. 
Victim: etherscan.io/address/0x1e22β¦
Address poisoner: etherscan.io/address/0xd9a1β¦
Poison transaction:β¦
9
Generating these addresses is relatively quick, but replicating the middle sequence poses a more significant challenge.
To make it increasingly difficult for you to fall for these scams, i introduced the "π check" for web3 addresses.
I'm sure many are building better tools to prevent this.
I'll do my part by coming up with a quick and simple system for non tech users.
The address "
burger check".Not perfect, but it increases the chances of avoiding similar fatal mistakes.
We need a better term?
Recommend:
- Use wallets or tools that identify these scams
- NEVER copy an address from history
- Send small test amounts first, when dealing with a lot of funds
- Use @safe msig
The "π check" is meant to aid non technical crypto users identify fairly quickly if two address are similar.
It has these 3 simple steps:
Check for the start of the address (bread).
Select a random sequence of 5-6 characters from the middle of the address (meat).
Verify the end of the address (bread).
These steps are easily executable by humans, offering a basic yet effective means of validation.
The inclusion of a random sequence in step 2 enhances security, making it highly improbable for scammers to replicate the same sequence. Additionally, randomizing the start of the "meat" sequence with each transaction further fortifies security.
However, it's important to ensure the integrity of the source from which the address is copied before performing the "π check."
Do NOT use block explorers or wallet transaction histories to copy address, as they are not considered trusted sources.
Possible trusted sources may include:
1. address book.
2. Copy from wallet directly.
3. CEX trusted websites.
If you interact successfully with an address, copy it into a trusted source or address book.
This assumes computer is free from Trojans, etc that can corrupt the memory clip board.
In essence, the "π check" provides a simple and practical way for web3 users to verify addresses they intend to interact with, particularly geared towards non-technical users.
Its useful for checking all addresses including bitcoin and solana.
While more sophisticated users may employ advanced tools and additional checks, this method serves as a simple tool for educating and safeguarding against scams.
Feel free to share and educate others about this approach.
