Address Poisoning Costs User 140 ETH — Verify Addresses First

I’m reporting that a user fell victim to an address poisoning attack and mistakenly sent 140 ETH to a malicious address, losing roughly $636,000.

I believe this highlights how easy it is to lose large sums from subtle address substitution or clipboard tampering and that standard UX can fail users under pressure.

I recommend immediate operational changes: always verify addresses on a hardware device, send a small test transaction first, use ENS or trusted address books, and avoid copying addresses from untrusted links or clipboard-sensitive environments.