A Wallet Born in 2015 Just Outran Crypto's Most Sophisticated Trap
Scambots poisoned an 11-year-old Ethereum wallet's transaction history within minutes of it moving $4.6 million — and the owner sent every dollar to the right address anyway.
This isn't just a close call. It's a live demonstration of how dangerous dormant wallets have become the moment they breathe again.
What Actually Happened
The wallet dates back to Ethereum's original 2015 launch, putting it in the rarest tier of on-chain history. When it finally stirred, automated bots were watching. These weren't slow, manual scammers. Within minutes, they deployed lookalike addresses and injected them directly into the wallet's transaction history using a technique called address poisoning.
The play is surgical. When a wallet owner copies a recent address from their own history to send funds, they grab the fake one instead. The addresses look nearly identical at a glance, differing only in a few middle characters most people never check. Bots bank on the habit. This time, they lost.
The owner sent the funds to the correct destination. $4.6 million moved safely.
Why This Hit Different
Address poisoning isn't new, but the speed here is what matters. Bots are now scanning the mempool in real time, specifically hunting for wallets with long dormancy periods. The logic is cold: someone who hasn't touched a wallet in a decade is probably not running a hardware verification checklist in 2025. They're rusty. They're trusting muscle memory.
The attackers weren't wrong about the vulnerability. They were wrong about this particular person.
This incident also signals something broader. As Ethereum's earliest wallets begin moving again — whether for profit-taking, estate reasons, or simple curiosity — they are walking into a threat landscape that didn't exist when those wallets were created. The 2015 version of crypto security was a password and a prayer. Today, the mempool is a hunting ground.
What Crypto Holders Should Watch Right Now
If you have a wallet you haven't touched in years, treat it like a cold reentry. Never copy addresses from your transaction history. Always verify the full address string, character by character, against a trusted source. Consider using ENS names or whitelisted address books where possible.
Beyond personal security, watch for more dormant whale wallets activating in the coming months. Each one is a signal worth reading: early Ethereum holders moving money tells you something about where long-term conviction stands heading into this cycle.
The bots are already watching. You should be too.