The wallet integrates a real-time alert system across 32 EVM chains to block one of the most widespread crypto attacks.
Trust Wallet has announced the launch of a new security feature called Address Poisoning Protection, available on its mobile app across 32 EVM chains, with support for additional networks planned. The feature automatically scans users’ transactions to detect incorrect addresses and sends an alert before funds are sent to the wrong recipient.
An address poisoning attack involves sending small transactions from addresses that are nearly identical to legitimate ones, with the goal of tricking users who, when copying their transaction history, end up pasting the fraudulent address. The new tool will leverage the aggregated intelligence of HashDit and Binance Security to verify addresses known to be fraudulent or similar to legitimate ones, and will display a side-by-side comparison to highlight the differences between the two addresses.
“The threat is designed to be invisible: a handful of characters hidden in the middle of a long string, easy to overlook and costly to ignore,” said Felix Fan, CEO of Trust Wallet. “Address Poisoning Protection is our response to this reality: automatic, real-time alerts that give users the information they need before they act.”
Security firm Cyvers estimates that over 1 million address poisoning “setups” are detected daily on the Ethereum network alone. According to a Trust Wallet spokesperson, 34,000 attacks occur every hour, with 17 million users potentially at risk.
Trust Wallet notes that the new feature integrates with its existing security stack, which includes a transaction-level risk analysis tool introduced in 2023. “While Security Scanner evaluates the entire transaction before the user confirms it, flagging phishing contracts, malicious dApps, and suspicious token approvals, Address Poisoning Protection intervenes at an even earlier stage of the process – the moment the user copies or enters a destination address,” the company explained.
Trust Wallet is not the first player in the industry to introduce automatic protections of this kind. Ledger Live already offers “clear signing” to display full transaction details, as well as a whitelist option for trusted addresses.
