A copy-paste error led to a nearly $50 million USDT loss due to an address poisoning scam. Scammers used a spoofed address for a small transaction to deceive the victim into copying it, facilitating rapid theft and laundering.
A cryptocurrency user lost $50 million USDT on Ethereum on December 20, 2025, due to an address poisoning scam where funds were converted and laundered via Tornado Cash.
The crypto user fell victim to an address poisoning scam, an increasingly common tactic. Scammers use look-alike addresses to trick victims into transferring significant sums to fraudulent accounts on Ethereum.
An unknown user mistakenly transferred 49,999,950 USDT to a spoofed address. Scammers promptly converted these funds to ETH and utilized Tornado Cash for laundering.
This incident underscores the risks within decentralized finance environments.
The scam’s immediate effect highlights vulnerabilities in crypto transactions, causing anxiety among individual investors. Users and security experts call for enhanced security measures to protect against such scams.
This incident exemplifies financial, regulatory, and technological challenges in maintaining transaction security. While the precise impact on markets remains unclear, the scam’s notoriety prompts industry stakeholders to enhance user security and education efforts.
Address poisoning incidents have caused losses exceeding $100 million industry-wide. Such events compel stakeholders to search for preventive technological solutions and increased vigilance to build user confidence in blockchain operations.

