{"id":95197,"date":"2026-03-13T12:57:16","date_gmt":"2026-03-13T09:57:16","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=95197"},"modified":"2026-03-13T13:00:36","modified_gmt":"2026-03-13T10:00:36","slug":"ethereum-address-spoofing-attacks-surge-by-600-following-fusaka-update","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/ethereum-address-spoofing-attacks-surge-by-600-following-fusaka-update\/","title":{"rendered":"Ethereum Address Spoofing Attacks Surge by 600% Following Fusaka Update"},"content":{"rendered":"<p>The practice of <span data-descr=\"address poisoning\" class=\"old_tooltip\">address poisoning<\/span> in the Ethereum network is becoming widespread. Following the <a href=\"https:\/\/forklog.com\/en\/news\/fusaka-upgrade-what-it-means-for-ethereums-future\">Fusaka<\/a> update, the number of &#8220;dust&#8221; transfers of <a href=\"https:\/\/forklog.com\/en\/news\/what-is-tether-usdt\">USDT<\/a> increased by 612%, according to Etherscan data.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"zxx\" dir=\"ltr\"><a href=\"https:\/\/t.co\/SBZoEtLqM0\">https:\/\/t.co\/SBZoEtLqM0<\/a><\/p>\n<p>\u2014 etherscan.eth (@etherscan) <a href=\"https:\/\/twitter.com\/etherscan\/status\/2032067841734951008?ref_src=twsrc%5Etfw\">March 12, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script> <\/p>\n<p>The reduction in network fees due to the upgrade has triggered a new wave of fraudulent activity. Malefactors are sending millions of zero-value microtransactions to clutter the transaction history in victims&#8217; wallets.<\/p>\n<p>Their main goal is to trick users into mistakenly copying a fake address from the list of recent transactions.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"579\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/img-7b1843293af08589-8611995127226336-1024x579.png\" alt=\"image\" class=\"wp-image-276720\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/img-7b1843293af08589-8611995127226336-1024x579.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/img-7b1843293af08589-8611995127226336-300x170.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/img-7b1843293af08589-8611995127226336-768x434.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/img-7b1843293af08589-8611995127226336-1536x868.png 1536w, https:\/\/forklog.com\/wp-content\/uploads\/img-7b1843293af08589-8611995127226336.png 2010w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Source: X\/Etherscan.<\/figcaption><\/figure>\n<p>In the 90 days following the <a href=\"https:\/\/forklog.com\/en\/news\/fusaka-hard-fork-goes-live-on-ethereum-mainnet\">activation of the update<\/a> on December 3, 2025, the number of &#8220;dust&#8221; transfers\u2014transactions of less than $0.01\u2014soared compared to the same period before the upgrade:<\/p>\n<ul class=\"wp-block-list\">\n<li>USDT: +612% (from 4.2 million to 29.9 million);<\/li>\n<li><a href=\"https:\/\/forklog.com\/en\/news\/what-is-the-usdc-stablecoin\">USDC<\/a>: +473% (from 2.6 million to 14.9 million);<\/li>\n<li><a href=\"https:\/\/forklog.com\/en\/news\/what-are-makerdao-mkr-and-the-dai-stablecoin\">DAI<\/a>: +470% (from 142,000 to 811,000);<\/li>\n<li>ETH: +62% (from 104.5 million to 169.7 million).<\/li>\n<\/ul>\n<p>Meanwhile, the number of regular transactions over $0.01 remained unchanged, indicating a spike in fraudulent activity rather than organic network growth.<\/p>\n<h2 class=\"wp-block-heading\">How It Works<\/h2>\n<p>Fraudsters monitor large transfers on the blockchain. Automated systems generate lookalike addresses that mimic the first and last characters of addresses with which the victim recently interacted.<\/p>\n<p>Then, scammers send &#8220;dust&#8221; transfers to ensure the fake address appears in the transaction history. They hope the victim will copy the counterfeit details and send funds to it.<\/p>\n<p>Sometimes, several hacker groups compete to &#8220;poison&#8221; a wallet. One Etherscan screenshot shows up to 13 fake transactions from different attackers entering a victim&#8217;s history within minutes of a legitimate USDT transfer.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"776\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/img-c5247607d5431854-8612012003722666-1024x776.png\" alt=\"image\" class=\"wp-image-276721\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/img-c5247607d5431854-8612012003722666-1024x776.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/img-c5247607d5431854-8612012003722666-300x227.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/img-c5247607d5431854-8612012003722666-768x582.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/img-c5247607d5431854-8612012003722666.png 1536w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Source: X\/Etherscan.<\/figcaption><\/figure>\n<p>Analysts also mentioned a complaint from a user named Nima. He reported receiving over 89 alert emails about address activity after two <a href=\"https:\/\/forklog.com\/en\/news\/what-are-stablecoins\">stablecoin<\/a> transfers.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">Address poisoning attacks are getting out of hand. I just sent two stablecoin transactions and received +89 emails from my Etherscan address watch alert notifications.<\/p>\n<p>It took them <30 mins to create all of these on mainnet.\n\nSo many will fall victim to this. <a href=\"https:\/\/t.co\/H1nGaMMprE\">pic.twitter.com\/H1nGaMMprE<\/a><\/p>\n<p>\u2014 Nima \ud83d\udc41\ufe0f (@0xNimaRa) <a href=\"https:\/\/twitter.com\/0xNimaRa\/status\/2022126211401695313?ref_src=twsrc%5Etfw\">February 13, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<h2 class=\"wp-block-heading\">The Scale of the Problem<\/h2>\n<p>From July 2022 to June 2024, experts from Blockchain Address Poisoning <a href=\"https:\/\/www.usenix.org\/conference\/usenixsecurity25\/presentation\/tsuchiya\">recorded<\/a> around 17 million attempts to deceive users through address spoofing. Approximately 1.3 million people were targeted, with total damages exceeding $79 million.<\/p>\n<p>The issue is more acute in networks with low fees. For instance, on Binance Smart Chain, the number of fake transfers is 1355% higher than in Ethereum.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"381\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/img-3907b1c4307a2e7c-8612034392313883-1024x381.png\" alt=\"image\" class=\"wp-image-276722\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/img-3907b1c4307a2e7c-8612034392313883-1024x381.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/img-3907b1c4307a2e7c-8612034392313883-300x112.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/img-3907b1c4307a2e7c-8612034392313883-768x286.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/img-3907b1c4307a2e7c-8612034392313883.png 1150w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Source: X\/Etherscan.<\/figcaption><\/figure>\n<p>Only a small fraction of attacks\u2014about 0.01%\u2014are successful. However, the sheer volume of these campaigns makes the scheme highly profitable.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>&#8220;Instead of targeting individual addresses, campaigns often send thousands or even millions of fake transfers. With enough attempts, even a tiny success rate can yield significant profits,&#8221; noted Etherscan.<\/em><\/p>\n<\/blockquote>\n<p>Back in December 2025, an investor <a href=\"https:\/\/forklog.com\/en\/news\/investor-loses-nearly-50-million-in-address-spoofing-attack\">lost<\/a> nearly $50 million due to an address spoofing attack. Binance founder Changpeng Zhao <a href=\"https:\/\/forklog.com\/en\/news\/cz-proposes-measures-to-combat-address-poisoning\">proposed<\/a> additional security measures to &#8220;eradicate&#8221; this practice.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The practice of address poisoning in Ethereum is becoming widespread. Following Fusaka, &#8220;dust&#8221; transfers of USDT increased by 612%.<\/p>\n","protected":false},"author":1,"featured_media":95198,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"Address poisoning in Ethereum surges 600% post-Fusaka, with \"dust\" transfers rising sharply.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44,46,1246],"class_list":["post-95197","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime","tag-ethereum","tag-scammers"],"aioseo_notices":[],"amp_enabled":true,"views":"153","promo_type":"1","layout_type":"1","short_excerpt":"Address poisoning in Ethereum surges 600% post-Fusaka, with \"dust\" transfers rising sharply.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/95197","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=95197"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/95197\/revisions"}],"predecessor-version":[{"id":95199,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/95197\/revisions\/95199"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/95198"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=95197"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=95197"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=95197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}