MetaMask launches address poisoning attack detection

According to CrowdfundInsider, MetaMask has launched an address poisoning attack detection feature to identify fraudulent addresses that are highly similar to user historical interaction addresses. An address poisoning attack means that an attacker sends a small amount of token to the user's wallet, causing the fake address to appear in the transaction record, inducing the user to mistakenly copy and transfer money later. In recent years, address poisoning attacks have surged. Blockaid's security data alone shows that between January 2025 and February 2026, more than 65.4 million such incidents occurred. MetaMask's new function will automatically compare it with historical interactive addresses when users paste an address. If the first and last characters are found to be the same but the middle characters are different, a blocking reminder will pop up during the transfer process. MetaMask also improves the address display to display more characters and reduce the possibility of confusion. This feature is now available on MetaMaskMobile and browser plug-ins.