A trader just lost $450K in tBTC through an address-poisoning scam—and the method is disturbingly simple. The victim copied what they thought was the correct destination address from their own transaction history, after completing legitimate transfers earlier. The poisoned address was nearly identical to the real one, making it virtually impossible to spot at a glance.

What makes this attack particularly dangerous: there was no wallet compromise, no stolen keys, no smart contract exploit. Just a carefully crafted look-alike address sitting in the transaction history, waiting for the moment someone gets lazy with verification.

The lesson here is harsh but critical. Never copy-paste addresses, even from your own history. Always:
- Verify the first and last few characters carefully
- Use address book features instead
- Send small test amounts first on uncertain transfers
- Double-check on a different device if possible

Social engineering and address manipulation attacks aren't slowing down. They're evolving. Stay vigilant.