A user lost about $305,000 in DAI after an attacker used address poisoning, a scam that creates a counterfeit address resembling the intended recipient’s address. The attacker sent small dust transfers to induce the user to copy the fake address from transaction history. GoPlus Security said the operation was fully automated, covering target discovery, address generation and laundering through a mixer. It urged users to verify complete addresses and make a small test transfer before sending large amounts.