{"slug":"402-com-tr-api-x402-address-poisoning-7176d8","title":"The address-poisoning attack","host":"402.com.tr","method":"GET","resource":"https://402.com.tr/api/x402/address-poisoning","category":"market","description":"The address-poisoning attack: a scammer sends dust from an address whose first/last characters match one you really use, hoping you copy-paste the poisoned one. An auto-paying agent is the perfect victim. This compares the recipient against the head/tail of addresses the wallet actually transacts wi","price_listed":0.03,"price_asked":null,"state":"effects","state_label":"Not tested: has real-world effects","checks_7d":0,"answered_7d":0,"latency_ms_median":null,"reported_calls_30d":2,"reported_payers_30d":1,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","pathParams":{},"queryParams":{"to":"0xcF77a3Ba9A5CA399B7c97c74d54e5b1Beb874E43","wallet":"0xFe21a68f21d556A3C4274a44c2Fb5410c50cDa1C"},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"pathParams":{"type":"object"},"queryParams":{"properties":{"to":{"description":"Recipient you're about to pay","type":"string"},"wallet":{"description":"Your wallet (the sender)","type":"string"}},"required":["wallet","to"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[],"description_full":"The address-poisoning attack: a scammer sends dust from an address whose first/last characters match one you really use, hoping you copy-paste the poisoned one. An auto-paying agent is the perfect victim. This compares the recipient against the head/tail of addresses the wallet actually transacts with and flags a look-alike that is NOT a real counterparty. Pass wallet= (yours) and to= (the recipient). A heuristic — verify the full address regardless. Not financial advice.","last_updated":"2026-10-09T17:45:45.867Z","schemes":["exact"]}