Bofur Capital address loses $2M in address poisoning attack

A cryptocurrency address labeled “Bofur Capital” was hit by an address poisoning attack shortly after withdrawing funds from Compound, resulting in losses of about $2 million, according to blockchain security firm PeckShield. The attacker sent a small dust transaction of 0.0002 USDC to disguise a wallet address and trick the victim. The victim then copied and pasted the fake address from the transaction history and transferred the funds to it, leading to the theft of $2 million. The stolen funds were later swapped into 2 million DAI and are now being held at the address “0xe2eB...1816a,” PeckShield said.