We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
_cfuvidThis cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators.
Maximum Storage Duration: SessionType: HTTP Cookie
__cf_bm [x7]This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.
CookieConsentStores the user's cookie consent state for the current domain
Maximum Storage Duration: 1 yearType: HTTP Cookie
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
We do not use cookies of this type.
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
We do not use cookies of this type.
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
We do not use cookies of this type.
Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.
List of domains your consent applies to: [#BULK_CONSENT_DOMAINS#]
Cookie declaration last updated on 8/12/26 by Cookiebot
[#IABV2_TITLE#]
[#IABV2_BODY_INTRO#]
[#IABV2_BODY_LEGITIMATE_INTEREST_INTRO#]
[#IABV2_BODY_PREFERENCE_INTRO#]
[#IABV2_BODY_PURPOSES_INTRO#]
[#IABV2_BODY_PURPOSES#]
[#IABV2_BODY_FEATURES_INTRO#]
[#IABV2_BODY_FEATURES#]
[#IABV2_BODY_PARTNERS_INTRO#]
[#IABV2_BODY_PARTNERS#]
About
Cookies are small text files that can be used by websites to make a user's experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
You can at any time change or withdraw your consent from the Cookie Declaration on our website.
Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.
Please state your consent ID and date when you contact us regarding your consent.
Install NewsLayer
Get the app experience — one tap from your home screen, instant loads and breaking-news alerts.
Crypto ‘address misuse’ drained $574.8M in ETH and BNB — USENIX study
In a recent study titled “Lost in Blockchain Address Misuse: Hidden Cross-Platform Risks and Their Security Impact,” published by USENIX Security, researchers examined the issue of “Address Misuse.”
In a recent study titled “Lost in Blockchain Address Misuse: Hidden Cross-Platform Risks and Their Security Impact,” published by USENIX Security, researchers examined the issue of “Address Misuse.”
The researchers found 65,340 cases of high-risk address misuse in which approximately 2.5 million transactions were involved. The corresponding losses came to 17,726.7 Binance [BNB] and 126,982.94 Ethereum [ETH].
The researchers calculated address-misuse losses to be worth over $574.8 million. This, in reference to May 2025’s prices of $4,408 per ETH and $847 per BNB.
In this, 49,344 high-risk addresses and approximately 1.6 million transactions were the cause of Contract Account (CA) misuse. This led to losses of 22,738.41 ETH and 8,681.41 BNB.
Additionally, cases involving GitHub alone included 21,160 BNB Chain addresses and 26,908 Ethereum addresses. They were associated with losses of 7,513.66 BNB and 19,229.40 ETH.
Case study
The UniswapV2Router02 address 0xC532…4008 on Sepolia was highlighted by the researchers as having approximately 158,775 transactions by August 2025.
Even though the same address lacked a contract code on the Ethereum mainnet, 88 transactions were sent to it by users.
A malicious contract was deployed on the same address by an attacker on 6th October 2024. 3.78 ETH that users had inadvertently sent there was withdrawn.
Losses incurred by EOA addresses
Simultaneously, researchers found 15,996 high-risk Externally Owned Account (EOA) addresses associated with approximately 910,000 transactions and losses of 9,045.29 BNB and 104,244.53 ETH.
Private keys that were made public were the primary cause of these losses. GitHub-related cases alone accounted for 103,402.53 ETH and 8,521.07 BNB.
Source: Usenix.org
For instance, the Truffle test address 0x627…3Ef57, whose publicly accessible private key enables attackers to instantly drain any money accidentally sent to it, was used.
As it stands, over 85% of the addresses gathered from GitHub have not yet been misused. Even so, the researchers’ detection system achieved 99.11% precision. This suggested that if users continue to interact with dormant or compromised addresses, the risk could increase.
This finding was in line with a recent report by AMBCrypto. It revealed that Ethereum-related address poisoning losses totalled approximately $62 million between late 2025 and early 2026.
Final Summary
The Contract Account (CA) misuse led to losses of 22,738.41 ETH and 8,681.41 BNB.
Meanwhile, Externally Owned Account (EOA) addresses lost 9,045.29 BNB and 104,244.53 ETH.
