An Ethereum address dormant for 11 years transferred out 2,154.94 ETH and then fell victim to address poisoning

Odaily: According to Whale Alert monitoring, an address (0x7dD...) traceable to Ethereum's 2015 genesis block made its first outbound transfer of 0.05 ETH, worth approximately $106, at 6:04 Beijing time on the 10th. The address received its first ETH in the genesis block in July 2015, and received another 755 ETH in March 2016, after which it had never made any outbound transfers. The recipient address used for the test transfer began with 0x1321beb8 and ended with 1A44. About 3 minutes later, the address began receiving multiple tiny ETH transfers from two spoofed recipient addresses, which began with 0x13211f and 0x1321FB respectively and both ended with 1A44. The accounts funding these two addresses were tagged as "Fake_Phishing," with the more active one sending 43 dust transfers. This tactic is known as address poisoning, in which attackers write lookalike addresses into the target's transaction history to trick the holder into copying the wrong address from recent records and sending funds to it. At 6:20 Beijing time, the aforementioned new address sent out 0.01 ETH, which was almost entirely returned about 3 minutes later. At 6:42 Beijing time, about 38 minutes after the first test transfer, the old address transferred 2,154.94 ETH, worth approximately $4.6 million, to the correct address beginning with 0x1321beb8 and ending with 1A44. The new address currently holds about 2,155 ETH. Citi noted in January this year that address-poisoning spam transactions had driven up the number of transactions on the Ethereum network, with a large number of transfers amounting to less than $1.