Dormant Ethereum Wallet Evades Address Poisoning Scam Via Test Transfer

An Ethereum wallet dormant for approximately 11 years successfully transferred $4.6 million, evading a sophisticated address poisoning scam by employing a verification protocol involving test transfers.

The wallet, which received its initial Ether from the Ethereum genesis block in July 2015 and a further 755 ETH in March 2016, had remained inactive for over a decade. On November 9th, late UTC evening, the wallet initiated a series of transactions. A small test transfer of 0.05 ETH (approximately $106) was sent at 22:04 UTC.

Shortly after this initial test, scammers attempted to exploit the fund movement. According to on-chain data, dust transactions were sent from two imitation addresses closely resembling the intended recipient. These addresses were later flagged as ‘Fake_Phishing’ on Etherscan. Address poisoning involves scammers sending minuscule amounts of cryptocurrency (dust) from a newly created address that mimics a legitimate recipient, aiming to trick users into copying the scammer’s address.

To counter this, the wallet holder implemented a verification step. Before the main transfer, a small 0.01 ETH test was sent to the intended recipient address and then received back. This round-trip transaction reported the recipient address’s legitimacy, effectively neutralizing the address poisoning attempt and demonstrating a low-cost self-protection strategy for large transfers.

Following this verification, the main transfer of 2,154.94 ETH (approximately $4.6 million) was sent to the correct address at 22:42 UTC. Whale Alert noted the movement of these funds.

This incident highlights two significant issues within the Ethereum ecosystem. Firstly, long-dormant wallets holding substantial cryptocurrency present a vulnerability, as scammers actively monitor for their activation. Automated scripts can detect large dormant address movements and set up fake addresses in response to test transfers.

Secondly, the prevalence of address poisoning and associated dust transactions has altered Ethereum’s on-chain activity. As previously warned by Citi, these dust transactions have contributed to historical highs in Ethereum’s transaction count, potentially making network metrics less indicative of genuine user activity. The wallet holder’s successful evasion through a verified test transfer serves as a practical example of how users can protect themselves against such evolving scam tactics.

Uncertainties remain regarding the wallet holder’s exact identity and the specific methods used by scammers to create imitation addresses. It is also unclear if wallet providers will implement further measures to mitigate address poisoning or if holders of large dormant wallets will adjust their transfer habits.

Why This Matters

The materials describe a narrow update: An Ethereum wallet, dormant since the 2015 genesis block, transferred approximately $4. The exact identity of the wallet holder.

Broader Context

Source materials place the factual news in this context: An 11-year-dormant Ethereum wallet woke up and transferred $4.6 million, evading address poisoning within 3 minutes.