Bofur Capital loses $2M in address-poisoning attack after Compound withdrawal… Phisher sent a 0.0002 USDC dust tx to spoof the address, and the victim copy-pasted the wrong one -$2M drained. Now several important OpSec tips: 1. Use an address book (whitelist)! 2. Never copy/paste an address from the transaction history (etherscan or blockscan); 3. Using a test transaction with a small sum is not a proper defence against address poisoning! This is generally a bad habit. P.S. You can also use tools like @web3_antivirus or @realScamSniffer(Officer's Notes)