{"id":77008,"date":"2023-04-11T12:32:00","date_gmt":"2023-04-11T09:32:00","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=77008"},"modified":"2025-09-10T20:46:17","modified_gmt":"2025-09-10T17:46:17","slug":"etherscan-will-stop-displaying-near-zero-value-token-transfers","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/etherscan-will-stop-displaying-near-zero-value-token-transfers\/","title":{"rendered":"Etherscan will stop displaying near-zero-value token transfers"},"content":{"rendered":"<p>As a safety measure, the blockchain explorer Etherscan will stop displaying near-zero-value token transfers by default, a step aimed at curbing a new wave of phishing attacks.<\/p>\n<blockquote class=\\\"twitter-tweet\\\">\n<p lang=\\\"en\\\" dir=\\\"ltr\\\">Update: Zero-value token transfers are now hidden by default<\/p>\n<p>In recent times, \u2018address poisoning\u2019 attacks have phished unsuspecting users and spammed everybody else. With this update you won\u2019t have to see these transfers anymore!<\/p>\n<p>Before \u27a1\ufe0f After <a href=\\\"https:\/\/t.co\/F93pWDUJ7a\\\">pic.twitter.com\/F93pWDUJ7a<\/a><\/p>\n<p>\u2014 Etherscan (@etherscan) <a href=\\\"https:\/\/twitter.com\/etherscan\/status\/1645406189692526593?ref_src=twsrc%5Etfw\\\">April 10, 2023<\/a><\/p><\/blockquote>\n<p> <script async=\\\"\\\" src=\\\"https:\/\/platform.twitter.com\/widgets.js\\\" charset=\\\"utf-8\\\"><\/script><\/p>\n<p>For users who want to see such transactions, developers recommended turning off the corresponding option in the settings.<\/p>\n<p>The Etherscan team urged the community to report new phishing attack types.<\/p>\n<p>The reaction followed the disclosure by an expert going by the handle X-explore, together with journalist Colin Wu, of two new fraud schemes that led to total losses of $8 million.<\/p>\n<blockquote class=\\\"twitter-tweet\\\">\n<p lang=\\\"en\\\" dir=\\\"ltr\\\">1\/? The zero-value transfer phishing attack has upgraded to small-value transfer and fake token transfer phishing, $8 million has been stolen. We give an overall analysis about these new attacks to warning all Web3 users. <br \/>Detail in our Mirror:<a href=\\\"https:\/\/t.co\/eIAMrfmTl2\\\">https:\/\/t.co\/eIAMrfmTl2<\/a><\/p>\n<p>\u2014 X-explore (@x_explore_eth) <a href=\\\"https:\/\/twitter.com\/x_explore_eth\/status\/1645416817446510595?ref_src=twsrc%5Etfw\\\">April 10, 2023<\/a><\/p><\/blockquote>\n<p> <script async=\\\"\\\" src=\\\"https:\/\/platform.twitter.com\/widgets.js\\\" charset=\\\"utf-8\\\"><\/script><\/p>\n<p>In the first scheme, the attacker reduces the initial amount by tens or hundreds of thousands of times. He then forwards the asset to the victim via a phishing wallet to bypass the traditional zero-value token phishing check on Etherscan. As a result, the actual transfers raise trust in the address.<\/p>\n<div class=\\\"wp-block-image\\\">\n<figure class=\\\"aligncenter size-full\\\"><img decoding=\\\"async\\\" src=\\\"https:\/\/u1f987.com\/wp-content\/uploads\/image-158.webp\\\" alt=\\\"image-158\\\" class=\\\"wp-image-203893\\\"\/><figcaption>Data: Mirror.<\/figcaption><\/figure>\n<\/div>\n<p>The scammer initiated 30,000 calls to the smart contract to carry out the attacks, paying 404 ETH (~$727,000) in gas. The value of tokens across the transfers amounted to about $40,000, of which 71% was USDT.<\/p>\n<p>The attack victims numbered 73,290 users. Twenty-three of them transferred a total of $1.2 million to the attackers&#8217; wallet, roughly split between USDT and USDC.<\/p>\n<figure class=\\\"wp-block-image size-full\\\"><img decoding=\\\"async\\\" src=\\\"https:\/\/u1f987.com\/wp-content\/uploads\/image-159.webp\\\" alt=\\\"image-159\\\" class=\\\"wp-image-203894\\\"\/><figcaption>Data: <a href=\\\"https:\/\/dune.com\/opang\/zero-value-token-transfer-phishing-scam\\\">Mirror<\/a>.<\/figcaption><\/figure>\n<p>Experts found that the attacker is linked to accounts on Binance, Coinbase, Kucoin and Kraken, which platform staff can monitor. To move funds, the attacker transferred 130 ETH to Avalanche and then back, converting to USDT and cashing out through MEXC.<\/p>\n<p>In the second scheme, the attacker creates fake tokens with similar names and transfer records showing the user receiving the same amount. The phishing wallet and the origin address have exactly the same number of digits in the browser visualization, differing only in the case of one or two letters as a result of a checksum check.<\/p>\n<figure class=\\\"wp-block-image size-full\\\"><img decoding=\\\"async\\\" src=\\\"https:\/\/u1f987.com\/wp-content\/uploads\/image-160.webp\\\" alt=\\\"image-160\\\" class=\\\"wp-image-203895\\\"\/><figcaption>Data: <a href=\\\"https:\/\/dune.com\/opang\/zero-value-token-transfer-phishing-scam\\\">Mirror<\/a>.<\/figcaption><\/figure>\n<p>Since March 18, the attacker spent 158 ETH to carry out 423,751 similar attacks on 102,553 addresses. The victims were 27 users who lost $6.75 million, roughly in a 60:40 split between USDT and USDC.<\/p>\n<figure class=\\\"wp-block-image size-full\\\"><img decoding=\\\"async\\\" src=\\\"https:\/\/u1f987.com\/wp-content\/uploads\/image-161.webp\\\" alt=\\\"image-161\\\" class=\\\"wp-image-203896\\\"\/><figcaption>Data: <a href=\\\"https:\/\/dune.com\/opang\/zero-value-token-transfer-phishing-scam\\\">Mirror<\/a>.<\/figcaption><\/figure>\n<p>In this type of attack, the attacker used <a href=\"https:\/\/u1f987.com\/en\/news\/what-is-the-tornado-cash-mixer-and-why-was-it-sanctioned\"> Tornado Cash <\/a> as the source of funds and the conduit for withdrawal.<\/p>\n<p>Along with <a href=\\\"https:\/\/mirror.xyz\/x-explore.eth\/cL3d_CyNujXq8XY7ueP4omNXx_IY1EG5Dz0FD0vJ90M\\\">the previous similarly themed method<\/a>, the new phishing variants led to total losses of $32 million.<\/p>\n<blockquote class=\\\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\\\">\n<p><em>\u201cBecause it is hard to distinguish real transactions from counterfeit ones, we recommend not copying addresses from a blockchain explorer, but verifying them offline before making a transaction\u201d,<\/em> \u2014 advised by experts.<\/p>\n<\/blockquote>\n<p>Experts recommended cross-checking the data on a dedicated <a href=\\\"https:\/\/dune.com\/opang\/zero-value-token-transfer-phishing-scam\\\">dashboard<\/a>. They also proposed creating a personal address book.<\/p>\n<p>In February, the developers of the non-custodial crypto wallet MetaMask<a href=\"https:\/\/u1f987.com\/en\/news\/metamask-team-warns-users-about-phishing\"> warned<\/a> users about phishing attacks via a third-party email service.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As a safety measure, the blockchain explorer Etherscan will stop displaying near-zero-value token transfers by default, a step aimed at curbing a new wave of phishing attacks.<\/p>\n","protected":false},"author":1,"featured_media":77009,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1484,1246],"class_list":["post-77008","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-etherscan","tag-scammers"],"aioseo_notices":[],"amp_enabled":true,"views":"42","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/77008","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=77008"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/77008\/revisions"}],"predecessor-version":[{"id":77010,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/77008\/revisions\/77010"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/77009"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=77008"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=77008"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=77008"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}