The widely used cryptocurrency wallet Trust Wallet has recently introduced an automated security mechanism specifically designed to combat the increasingly rampant "address poisoning" scams. This feature aims to proactively identify and intercept potential risks before users initiate transfers, preventing funds from being stolen at the source.
Address poisoning is a highly covert online scam where attackers send a small amount of worthless tokens to a user's wallet, accompanied by a forged address that closely resembles a legitimate recipient address. These fake addresses typically have only slight differences in the middle characters, while the beginning and end portions match the legitimate address exactly. Due to the difficulty for human eyes to detect these subtle changes, many users mistakenly believe they are copying a trusted address they have used before, ultimately transferring large amounts of assets to accounts controlled by the attackers. Since blockchain transactions are irreversible, once the transfer is completed, the funds are nearly impossible to recover.
According to cybersecurity firm Cyvers, there are over a million address poisoning attempts on the Ethereum network daily. Internal data from Trust Wallet indicates that there are up to 34,000 successful attacks per hour on average, demonstrating that such scams have become large-scale and industrialized operations rather than isolated incidents.
To address this threat, Trust Wallet's new feature automatically activates whenever a user initiates a transfer. The system compares the target address with similar addresses from historical transactions and highlights character differences, allowing users to visually identify anomalies. This feature does not require users to manually enable or configure it; it is enabled by default and covers all on-chain transfer operations, ensuring the highest level of protection.
The proliferation of such attacks is attributed to their low cost and high return characteristics. Attackers can initiate tens of thousands of attempts with just a small Gas fee, and if a high-net-worth wallet user is careless, they can reap substantial rewards. Even with a very low success rate, a single successful attempt is enough to cover the costs of thousands of failures. This upgrade by Trust Wallet marks a significant step forward in proactive defense for mainstream wallets, creating a safer asset interaction environment for users.