News

Public · Published

Crypto 'address misuse' drained $574.8M in ETH and BNB — USENIX study

A USENIX research study found that attackers exploited confusion between Ethereum (ETH) and Binance Smart Chain (BNB) addresses, causing victims to send funds to wrong chains and resulting in the theft of approximately $574.8 million in ETH and BNB.

Published:

Updated:

What happened

A USENIX research study found that attackers exploited confusion between Ethereum (ETH) and Binance Smart Chain (BNB) addresses, causing victims to send funds to wrong chains and resulting in the theft of approximately $574.8 million in ETH and BNB.

Confirmed

Global impact / market context

The loss highlights how easy it is for users to mistake one blockchain’s address format for another, leading to accidental fund transfers that cannot be reversed; such mistakes undermine confidence in crypto wallets and may deter new participants.

Analyst inference

As decentralized finance expands, more users move assets across multiple chains, increasing reliance on cross‑chain bridges and wallets. Recent high‑profile hacks and scams have raised scrutiny on security practices, making address‑confusion attacks a growing regulatory and investor concern.

Analyst inference

What to watch

  1. Watch for wallet providers adding explicit address‑validation warnings when users copy‑paste addresses across chains, which could reduce mistaken transfers and limit future losses. Proposed
  2. Monitor regulatory guidance on cross‑chain transaction disclosures, as authorities may require platforms to flag address‑format mismatches to protect investors and enforce penalties for non‑compliance. Proposed
  3. Observe any uptick in phishing campaigns that mimic official cross‑chain transfer prompts, since attackers may exploit heightened awareness to craft more convincing scams. Analyst inference

Affected assets

  • ETH — Ethereum
  • BNB — BNB

Evidence