A victim lost $2.6 million in stablecoins by falling for two zero-value transfer phishing scams within three hours, raising concerns over address poisoning tactics.
A single victim was scammed two times within three hours, losing a total of $2.6 million in stablecoins.
According to data shared on May 26 by crypto compliance firm Cyvers, the victim sent 843,000 worth of USDt (USDT), followed by another 1.75 million USDt around three hours later. Cyvers said the scam used a method known as a zero-value transfer, a sophisticated form of onchain phishing.
Zero-value transfers are an onchain phishing technique that abuses token transfer functions to trick users into sending real funds to attackers. The attackers exploit the token transfer From function to transfer zero tokens from the victim’s wallet to a spoofed address.
