[Mewtwo]

I was looking through my transactions and I’ve seen that there was someone sending me less than a penny in ETH addresses similar to my Ethereum deposit address.


It went like this: 0xtest….abc
And theirs will be the same but different …

[Kify]

Yeah, completely normal.
Think that every address I've ever used that has a balance >1k gets poison spam after every transaction, on Solana more than on Ethereum though. Big transactions can trigger like 20-30 poison spam transactions.

[Costanza]

Yeah man i get legit 10+ daily its cooked addy is close to the same too lol

[Omniscient]

Does this happen on a particular blockchain?

I don't really use much Smart Contract. Mainly Tron and Sui for stablecoins. I see no spam.

[Costanza]

Does this happen on a particular blockchain?

I don't really use much Smart Contract. Mainly Tron and Sui for stablecoins. I see no spam.

Eth
anytime i send any its gg

[Omniscient]

Eth
anytime i send any its gg

Really, that's interesting. Is it a web3 wallet used on a site or is this like a mobile wallet? Do you just suddenly get a random token?

[Costanza]

Really, that's interesting. Is it a web3 wallet used on a site or is this like a mobile wallet? Do you just suddenly get a random token?

Whenever i swap for example changelly and others

[Mewtwo]

Really, that's interesting. Is it a web3 wallet used on a site or is this like a mobile wallet? Do you just suddenly get a random token?

Here’s an example:
https://debank.com/profile/0x037c1e88837...c6/history


I used the okx wallet for this. As soon as I sent it to the exchange, I started getting those funky ETH spams. 24 txs, at a avg tx cost of 0.005 to send.

It must be really profitable for them if they’re doing it on a large scale. 100k tx fees = 12k. One person must be falling a victim.

AI Quote:
There’s no single official number, but we can estimate realistically using known phishing-style conversion rates and what blockchain security firms have reported.

Let’s break it down logically.

⸻

📊 Real-world data (from blockchain security reports)

Security firms like Chainalysis, SlowMist, and PeckShield have observed:
• Address poisoning campaigns hit thousands to millions of wallets
• Only a tiny fraction of users actually send funds to the poisoned address
• But when they do — losses are often large

Typical estimated success rates:

👉 0.01% – 0.1% of targeted wallets
(That’s 1 in 10,000 to 1 in 1,000)

This is consistent with email phishing, SMS scams, etc.

⸻

🧮 If scammers send 100,000 poison transactions

Using realistic conversion ranges:

Conservative estimate (0.01%)
• 100,000 targets
• 10 victims

Moderate estimate (0.05%)
• 100,000 targets
• 50 victims

Aggressive / highly optimized campaign (0.1%)
• 100,000 targets
• 100 victims

⸻

💰 Why that’s insanely profitable

Even if just 10 people fall for it:

If average mistaken transfer = $2,000
→ $20,000 revenue

Campaign cost (cheap chain spam) maybe:
→ $100 – $500

ROI = massive.

⸻

🧠 But on Ethereum mainnet specifically…

ETH mainnet users tend to be:
• More experienced
• Paying higher gas
• More careful

So success is usually lower than L2 chains.

More realistic ETH mainnet estimate:

👉 0.005% – 0.03%

So for 100,000 poisoning attempts:
• 5 to 30 victims

Still very profitable.

⸻

⚠️ Important psychological factor

Success rate depends heavily on:

✔ Wallet UX (shows truncated addresses)
✔ User behavior (copying from history)
✔ Transaction frequency
✔ Whether victim sends large transfers regularly
✔ Whether they verify full address

High-volume traders and businesses are more valuable targets.

⸻

📉 Your personal likelihood (if you’re careful)

If someone:

✔ Always checks full address
✔ Uses whitelist / hardware wallet
✔ Never copies from history

Risk becomes extremely low.

Probably:

👉 Less than 1 in 100,000 per send
(or effectively near zero over time)

Address poisoning mainly catches:
• rushed users
• beginners
• high-frequency senders who rely on history

⸻

🧠 Simple answer

If scammers send 100,000 poison transactions:

👉 Expected victims = about 5 to 100 people depending on campaign quality
👉 Typical realistic range = 10 to 50

⸻

👍 If you want deeper analytics, I can show you:
• Real 2024–2025 address poisoning loss totals
• Biggest poisoning scams ever recorded
• Mathematical model of expected profit per campaign
• How often large wallets fall vs small wallets
• How to code a poison-address detector

Just say.

[Omniscient]

Whenever i swap for example changelly and others

Start using Houdini, it's so much better.

[Hackers]

Yeah unfortunately this is a big problem. People make mistakes and click into recent TX to send to without verifying, so the influx of spam transactions makes sense. It only takes 1 person to pay for the efforts to try to do this to many.

Usually I see a lot more attention spent on the first few & last few of an address.
in a lot of examples they're not even trying to use the same last 4 chars

There are address generators you can make (or use) that will keep hashing until it hits an address w/ a specific string at end. This is how people get cool addresses with their name at the end, but the same can be done to make something look like someone's real, actual address.

Web wallets could make this a lot harder if they started showing first 6 and last 6 instead of including the 0x in the first 6 and only showing the last 4.

It's not hard to hit a fake address "match" (same end) for only 4... It is harder to nail the first 4 after 0x AND the last 4, but doing it for first 6 AND last 6 would really help....

The more visibility, the better because it's harder to hash a match with 6 compared to 4

[Mewtwo]

Yeah unfortunately this is a big problem. People make mistakes and click into recent TX to send to without verifying, so the influx of spam transactions makes sense. It only takes 1 person to pay for the efforts to try to do this to many.

Usually I see a lot more attention spent on the first few & last few of an address.
in a lot of examples they're not even trying to use the same last 4 chars

There are address generators you can make (or use) that will keep hashing until it hits an address w/ a specific string at end. This is how people get cool addresses with their name at the end, but the same can be done to make something look like someone's real, actual address.

Web wallets could make this a lot harder if they started showing first 6 and last 6 instead of including the 0x in the first 6 and only showing the last 4.

It's not hard to hit a fake address "match" (same end) for only 4... It is harder to nail the first 4 after 0x AND the last 4, but doing it for first 6 AND last 6 would really help....

The more visibility, the better because it's harder to hash a match with 6 compared to 4

If I’m not mistaken, a government entity accidentally sent crypto to a poison address. I’m just surprised it’s possible to generate something like this, especially first 6 and last 6. That’s really a big problem if some people still fall for these.

[loadman]

i used to run this bot from a cloud service provider for testing the profitability

rented 100x 4090 costed me around 1.5k$ per day

Even with all that power, I can only generate 3–6 character addresses, and it takes 3–30 seconds per address.

Second, you have to monitor the mempool to make fast transactions. That also costs money. If you try to run your own dedicated private node for speed, it will cost $1k per month

also need filters to avoid losing money by sending transactions to hot wallets, contracts, etc.

It’s not as simple as “just make a transaction.” There’s math involved—you have to calculate gas fees, batch transactions, and more.

Sometimes daily cost will be $1k-5k

but can generate 100k$-300k$

[Costanza]

i used to run this bot from a cloud service provider for testing the profitability

rented 100x 4090 costed me around 1.5k$ per day

Even with all that power, I can only generate 3–6 character addresses, and it takes 3–30 seconds per address.

Second, you have to monitor the mempool to make fast transactions. That also costs money. If you try to run your own dedicated private node for speed, it will cost $1k per month

also need filters to avoid losing money by sending transactions to hot wallets, contracts, etc.

It’s not as simple as “just make a transaction.” There’s math involved—you have to calculate gas fees, batch transactions, and more.

Sometimes daily cost will be $1k-5k

but can generate 100k$-300k$

So your the type of guy that rapes my wallet with 100 transactions lol

[loadman]

So your the type of guy that rapes my wallet with 100 transactions lol

not exactly, i just wanted to test the functionality of poisoning transactions, didnt run it for long probably few days, the cost had increased significantly alot, wasnt worth it unless u have 50k-100k$ to invest

[Costanza]

not exactly, i just wanted to test the functionality of poisoning transactions, didnt run it for long probably few days, the cost had increased significantly alot, wasnt worth it unless u have 50k-100k$ to invest

Thats crazy it cost that much too , it must work lol
it's not really illegal either is it .