On March 5, blockchain monitoring revealed a major address poisoning attack that resulted in the loss of approximately $24 million worth of aEthUSDC. The compromised wallet was linked to X platform user sillytuna.
Address poisoning is a common blockchain scam technique. Attackers send small transactions using addresses that closely resemble a victim’s wallet address, hoping the victim will mistakenly copy and paste the malicious address in a future transaction.
Movement of the Stolen Funds
On-chain data indicates that around 20 million DAI from the stolen assets have been transferred to two intermediary wallets controlled by the attacker. So far, the funds have not entered mixing services, but the attacker has already begun bridging small amounts to the Arbitrum network.
Cross-chain transfers are often considered an early stage of laundering stolen crypto assets. Once funds move through mixers or multiple chains, tracing and recovery become significantly more difficult.
Bounty Program to Recover Funds
Following the incident, the victim announced a public bounty program, offering 10% of the recovered funds as a reward to security researchers who help track and recover the stolen assets.
How KYT Helps Detect Suspicious Transactions
As DeFi ecosystems and cross-chain infrastructure expand, the speed and complexity of illicit fund movement continue to increase. Exchanges and financial institutions require more advanced transaction monitoring capabilities.
KYT (Know Your Transaction) systems analyze wallet behavior, transaction patterns, and fund flows to identify suspicious activities in real time.
Solutions such as Trustformer KYT continuously monitor blockchain addresses and transactions, assigning risk scores and alerts to funds linked to hacks, scams, or high-risk wallets. This enables platforms to detect potentially dangerous funds before they enter their systems.
With address poisoning and other on-chain scams becoming more common, implementing a real-time KYT monitoring framework is increasingly essential for digital asset security and compliance.