Tron address poisoning scam drains $9.4 million from 15 victims
TRON (TRX)
Editor:
Eugene Serbin
Cryptocurrency.com.tr reports that a single address poisoning operator has drained $9.4 million from fifteen victims over the past four weeks. On-chain investigator Specter flagged these losses on August 27, noting that stolen balances were swapped into USDD and funneled to one consolidation wallet. The two largest victims each lost $2.5 million during this period.
Analyst Stacy Muur explained the mechanism on August 26, describing how attackers send dust transactions from fake addresses resembling those users have previously used. When victims copy these deceptive addresses from their history, they send funds directly to the thief instead of the intended recipient. This simple trick has allowed the scammer to steal significant sums without complex technical exploits.
The stolen assets were specifically moved into USDD, a stablecoin on the Tron network. Specter identified the operator as responsible for the combined losses across the fifteen affected accounts. The attack relies on users trusting the transaction history shown in their wallets. This method highlights the risks associated with copying addresses directly from recent activity.
How the market reacted
Whalio's own Binance spot order flow for TRX, measured when this story was written up on 27 August 2026. Not the outlet's figures.
Whalio data shows TRX trading at $0.3360 with a 1-hour buy ratio of 63.1%, indicating strong short-term buying pressure. This contrasts with a 45.6% buy ratio over the 4-hour window, suggesting that immediate buying momentum is outpacing the broader recent trend. The 24-hour buy ratio sits at 51.1%, showing a slight majority of buyers over the longer term. Volume delta for the hour is positive at $149,331, while the 4-hour delta is negative at -$723,612. Volume delta measures the net difference between buy and sell volume, so a positive number means buyers are more aggressive than sellers. The 24-hour volume delta is +$890,757, confirming that net buying has dominated the day despite the 4-hour dip.
The latest daily buy ratio of 49.7% sits at the 33rd percentile of the last 322 days, against a median of 52.4% - ordinary for this coin.
Twenty-four hours later
What TRX did over the 24 hours after the story broke. The market moves for its own reasons; this is what happened, not what the story caused.
Was that an ordinary day?
The same Binance spot measurements for TRX, averaged over the days leading up to the story.
Over the preceding week, the average buy ratio was 52.5%, which is slightly higher than the current 24-hour reading of 51.1%. This represents a decline of 1.4 points from the weekly average, indicating a marginal shift toward selling pressure compared to recent norms. Volume relative to the average is 1.00x, meaning trading activity is exactly in line with the weekly norm. The coin saw net buying on 5 of the last 7 days, with a total volume delta of +$15,193,910 over eight days. This suggests that while today is slightly less bullish than the weekly average, it remains an ordinary day for TRX trading behavior.