Ethereum Address Targeted by Poisoning Attack After Awakening

On November 10, a wallet address starting with 0x7dD, traceable to the Ethereum genesis block of 2015, made its first transfer of 0.05 ETH, approximately $106, at 6:04 AM Beijing time. The test receiving address was 0x1321beb8. This address had not transferred any funds since March 2016. The on-chain monitoring account Whale Alert flagged this transaction. About three minutes after the test transfer, the wallet began receiving multiple small ETH transfers from two spoofed target receiving addresses, which started with 0x13211f and 0x1321FB, both ending with 1A44. Etherscan indicated that the funding sources for these two addresses were marked as "Fake_Phishing," with one address sending 43 dust transactions. This method is known as address poisoning, where attackers entice holders to copy the wrong address to transfer large amounts of funds. At 6:20 AM Beijing time, the new address transferred out 0.01 ETH, and almost all of it was returned about three minutes later. Subsequently, at 6:42 AM, the old wallet transferred 2,154.94 ETH, approximately $4.6 million, to the correct address 0x1321beb8. The new address currently holds about 2,155 ETH.