Skip to content
~/drains.watch_
Soon
← Tags·Other

Test Transaction

2 incidents, 0 live. 279 days since the last new one.

2 drains in the last 12 months

2 drains in the last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
MonWedFri
Critical 4 · High 3 · Med 2 · Low 1 · Update ½ Less More

Follow this tag

Past

January 2026 1

  • High✕Still active

    Ethereum user loses $514K in USDT to address poisoning two minutes after a test transfer

    On 16 January 2026 a victim sent a 5,000 USDT test transfer and, two minutes later, 509,000 USDT to a lookalike Ethereum address planted by an address-poisoning scammer, a total loss of about $514,000. The intended address ended in D3E6F; the fake ended in f3e6F and differed only in the middle characters wallets usually hide. Cyvers flagged the theft.

    Ethereum USDT holder·Ethereum·$514K stolen·Since Jan 16, 2026·

December 2025 1

  • Critical✕Still active

    Trader loses nearly $50M in USDT to address poisoning after copying a lookalike address from history

    On 20 December 2025 a trader sent a 50 USDT test to the correct address, then 26 minutes later sent 49,999,950 USDT on Ethereum to a lookalike address the attacker had planted in their transaction history. The fake matched the first five and last four characters of the real address. Within 30 minutes the funds were swapped to DAI, then to about 16,690 ETH, and almost all of it went into Tornado Cash. Always check the full address, not just the start and end.

    Ethereum USDT holder (funds withdrawn from Binance)·Ethereum·$50M stolen·Since Dec 20, 2025·

Brief for your AI


Get notified about new drains

Follow every new drain and update in your feed reader, Slack, Discord or Telegram RSS bot:

Only follow a chain or a method you care about: every tag has its own feed at /t/<tag>/feed.xml.

Copied