QuiNVarium Wallet
Address poisoning
Recognize look-alike addresses inserted into public transaction history and avoid copying a destination from activity.
Address poisoning places a look-alike address in public activity so that a later copy from transaction history sends assets to an attacker.
How it appears#
An unknown address can share the first or last characters with a real destination. A tiny or zero-value transaction may make it visible in activity. The entry does not compromise the wallet by itself; the danger begins when the wrong address is reused.
Prevent it#
- Obtain the destination from the recipient or service's verified deposit screen.
- Do not copy an address from old activity.
- Compare the full address, or use a verified address-book entry.
- Check the network.
- Send a small test amount for a new high-value destination.
If you already sent to the wrong address, record the transaction hash and contact support for explanation. Support cannot reverse the confirmed transfer.