Security Reminder: Users should beware of "address poisoning" attacks that occur during periods of concentrated withdrawals.

Following the largest crypto hack in history, Binance launched phased withdrawal services starting at 14:00 Beijing Time on November 1, 2026. Some users opted to transfer their assets from the exchange to personal cold wallets after withdrawal channels reopened, seeking more autonomous custody. However, the concentrated withdrawal period post-reopening is a high-risk window for Address Poisoning attacks. Attackers target public addresses or addresses with recent transaction records, flooding them with "poisoning transactions". The fake addresses used in these transactions closely mimic users’ real addresses in several leading and trailing characters (typically the first and last four characters are identical), aiming to trick users into accidentally copying the wrong address from their wallet history during rushed operations, or having intermediate characters replaced by malware-infected clipboards. BlockBeats reminds users that when initiating withdrawals from a trading platform, they should manually verify all 42 hexadecimal characters of the target address in full, and recommends conducting at least two to three independent checks, avoiding reliance on auto-filled history, recent transaction lists, or system clipboard content.