Scam Sniffer: About 10 Safe wallets lost $2.05 million due to "address poisoning" attacks in the past week

Web3 anti-fraud platform Scam Sniffer posted on the X platform that in the past week, about 10 Safe wallets lost $2.05 million due to "address poisoning" attacks. The same attacker has stolen $5 million from approximately 21 victims in the past four months. Previously, Scam Sniffer posted on the X platform that Wallet Drainer abused Create2 to bypass security alerts in some wallets by generating new addresses for each malicious signature. It is understood that the CREATE2 opcode allows users to predict the address of a contract before it is deployed to the Ethereum network. Uniswap uses CREATE2 to create Pair contracts. Using Create2, Drainer can easily generate temporary new addresses for each malicious signature. After the victim signs the signature, Drainer creates a contract at that address and transfers the user’s assets. The motive is to bypass wallet security checks. In the past six months, such drainers have stolen nearly $60 million from approximately 99,000 victims. Since August, a group has used the same technique in Address Poisoning to steal nearly $3 million in assets from 11 victims, with one victim losing up to $1.6 million.