Phantom Chat Sparks Address Poisoning Concerns After $264K Loss

Phantom's built-in messaging feature is under scrutiny after an investor lost about $264,000 worth of Wrapped Bitcoin in a suspected phishing attack enabled by address poisoning. Blockchain investigator ZachXBT shared data showing 3.5 WBTC moved from address 0x85c to 0x4b7 in a transaction flagged as a “high balance” on Nansen, and the transaction pattern is consistent with address poisoning — a technique that targets users’ transaction histories rather than private keys.

Scammers commonly send small transactions so victims will copy an attacker’s address from their history and send funds to it. User Kill4h reported two messenger-linked incidents involving USDC transfers of $136 and $101. ZachXBT urged Phantom to improve its interface, saying the messenger did not filter spam transactions, and Phantom advises treating unsolicited tokens and NFTs as scams and avoiding links in paid search results or social posts promising free airdrops.

The wallet added a live chat feature across tokens, perpetual futures and predictions pages on Dec.

phantom, address poisoning, phishing, wrapped bitcoin, zachxbt, nansen, usdc, airdrops, live chat, transaction history