Security Alert: Users should be vigilant against "address poisoning" attacks during periods of concentrated withdrawals.

BlockBeats news, November 2 - After experiencing the largest theft in crypto history, the Binance platform began phased restoration of withdrawal services at 14:00 Beijing time on November 1, 2026. Some users, after the channels reopened, chose to transfer assets from the platform to personal cold wallets in pursuit of more autonomous custody methods.

However, the concentrated withdrawal period following the reopening of withdrawals is often a high-incidence window for Address Poisoning attacks. Attackers target public addresses or addresses with recent transfer records, densely sending "poisoning transactions." The forged addresses used in these transactions are highly similar to users' real addresses in the first and last several characters (commonly the first and last four characters are completely identical), aiming to induce users, during hurried operations, to mistakenly copy the wrong address from wallet history records, or to have the middle characters replaced by infected clipboard malware.

BlockBeats reminds users here that when initiating withdrawals from trading platforms, they should fully manually verify all 42 hexadecimal characters of the target address, and it is recommended to conduct at least two to three independent verifications, avoiding reliance on automatic filling from history records, recent transaction lists, or system clipboard contents.