Detecting the silent scam that tricks users into sending funds to the wrong address — without storing any data.
The Silent Killer of Crypto
Address Poisoning is one of the most psychologically deceptive scams in Web3. It doesn't exploit smart contracts. It doesn't use malicious code. It exploits human habit.
Here's how it works:
You send 100 USDC to your friend at 0x1234...5678
A scammer bot monitors the mempool and sees this transaction
The scammer sends a 0-value transaction FROM an address that looks almost identical: 0x1234...5679
Both transactions now appear in your MetaMask activity history
Next time you want to send funds to your friend, you copy the address from your history
You accidentally copy the scammer's address (because it looks 99% identical)
You send your funds to the scammer
The scary part? No security tool catches this. The transaction is technically valid. The address is real. The wallet sends it.…