Another victim lost $50K in USDT to an address poisoning attack on Ethereum. Same pattern: the first 4 and last 6…: about $50K phishing theft on Ethereum

. Reported by public sources (a security firm alert with an address). Amounts are as reported; the trace below shows what the chain says.

On 2026-10-28 09:07 UTC, @realScamSniffer reported that a victim lost about $50,000 in USDT on Ethereum in an address poisoning attack, in which the victim sent funds to a look-alike address that matched the first 4 and last 6 characters of the intended one. The timeline shows $52,097 moved out of the address 0xd967fb…16f9 on 2026-10-30 at 15:41 UTC, and $49,992 was swapped on Uniswap in the same minute. KadenaTrace's automatic trace shows $0 still held in the traced wallets. The case is registered as KT-20 and is being watched; the source does not report any freezing or recovery of funds.

Amount: about $50K (reported). Networks: Ethereum.

What is known

Reported
By @realScamSniffer.
Confirmed
A security firm alert with an address. The amount is as reported.
Recorded on Kadena
As KT-20: each move of the funds is written to a public contract.
Attacker address
None attributed by a source yet; 2 named in reports are traced but not called the attacker's.
Exchange deposits
None seen so far.
Frozen
No freeze read on chain.
Returned
No return of funds recorded here.
Trace coverage
The coverage of this trace was not recorded (traced before Oct 31, 2026); totals are lower bounds until the next refresh.

$52K followed across 2 addresses so far from 0xd967fb…bd16f9.

Recorded on Kadena as KT-20: every move of the funds is written to a public contract.

Sources

  • @realScamSniffer: ⚠️ Another victim lost $50K in USDT to an address poisoning attack on Ethereum. Same pattern: the first 4 and last 6 characters match. correct: 0xd967fbfdab100a

Timeline

  1. Registered on Kadena as KT-20: every move of the funds is now watched and recorded, and anyone can add updates
  2. $49,992 swapped on Uniswap transaction
  3. $52,097 moved out of the address transaction
  4. Alert from @realScamSniffer: about $50,000 link

Read: Address poisoning: how the look-alike address scam works, and how to check before you send.

Facts about addresses and transactions, never about people. Trace a wallet · Check an address · All live incidents