From vanity to poison: the evolution of address poisoning attacks

Duration: NaN:NaN:NaN

Speaker: Tong Yao

Type: Lightning Talk

Expertise: No prior knowledge

Event: Devcon

Date: Nov 2026

Address poisoning is a cat-and-mouse game. Documented incidents have cost users tens of millions - and the attacks keep adapting. We'll map every surface attackers try to exploit in Safe{Wallet}. Zero-value transfers pollute the transaction history. Fake tokens sneak into token lists. Lookalike Safes name the victim as an owner and appear in their account list - even among nested Safes. Behind these attacks are organized campaigns. Some mint thousands of lookalike Safes in plain sight from a single factory contract; others stay hidden, deploying one Safe per throwaway account and routing funds through decoys. We'll dig into how poisoned Safes are configured to fool their victims, follow the money that deployed them, and show where the trail goes cold. No filter catches every lookalike - the last line of defense is you. Attendees will leave with the attacker's playbook and a healthy distrust of familiar-looking addresses.