Jameson Lopp sounds alarm on Bitcoin address poisoning attacks

Jameson Lopp, the chief security officer at Bitcoin (BTC) custody company Casa, sounded the alarm on Bitcoin address poisoning attacks, a social engineering scam that uses similar addresses from a victim’s transaction history to fool them into sending funds to the malicious address.

According to Lopp’s Feb 6 article, the threat actors generate BTC addresses that match the first and last digits of addresses from the victim’s transaction history. Lopp analyzed the Bitcoin blockchain history for this type of attack and found:

“The first such transactions…