Why address poisoning works without stealing private keys

Address poisoning is a cryptocurrency scam technique that works by flooding users' transaction histories with fake entries containing scammer-controlled addresses. This method tricks victims into accidentally sending funds to the wrong address without requiring hackers to steal private keys.

• →Address poisoning attacks work by cluttering transaction history with fake entries rather than stealing private keys.
• →Scammers create fake transactions to insert their addresses into victims' transaction histories.
• →Users can accidentally copy scammer addresses when quickly selecting from recent transaction history.
• →This attack vector exploits user behavior and interface design rather than cryptographic vulnerabilities.
• →The technique is effective because users often rely on transaction history for address selection.