on-chain movement

An 11-year-old Ethereum wallet moved $4.6 million and dodged a scam set up in minutes

30Importance
closedStatus
5News media
Published
Updated

An Ethereum wallet that had been dormant since 2015 moved 2,154.94 ETH, worth about $4.6 million, after first sending a small test transaction. Within minutes, scam attempts targeted the wallet, including lookalike-address and dusting activity aimed at the transfer.

Key claims & sources

✓
The rapid scam attempts were framed as a reminder for stronger security measures around dormant wallets and crypto transfers.
✓
The wallet’s move came after 11 years of inactivity and involved a transfer of approximately $4.6 million in ETH.
✓
The wallet dated back to Ethereum’s launch in 2015, and the transaction drew attention from blockchain analysts.
✓
An Ethereum wallet that had been inactive since the network’s 2015 launch moved 2,154.94 ETH, worth about $4.6 million, after a small test transaction.
✓
Just under three minutes later, scammers began sending dust to the address and using lookalike addresses around the transfer.

What it means

Address poisoning exploits a simple habit: copying a previous transaction hash or address from history instead of retyping it. Scammers send near-identical 'dust' addresses that differ by a few characters, hoping a wallet owner copies the wrong one for a future transfer. The tactic has targeted other dormant or high-value wallets before, but the speed here, just under three minutes after a 2015 genesis wallet's first move in 11 years, shows how automated the scanning of blockchain activity has become.

Anyone holding coins in a long-dormant wallet now has a concrete playbook: send a small test transaction first, as this owner did, and verify the destination address character by character rather than trusting clipboard history. Wallet providers and block explorers gain a reason to flag lookalike addresses automatically rather than leaving detection to the user. Scammers, meanwhile, lose nothing by trying, since spraying dust and fake addresses costs little and only needs to work once against a careless transfer. (per crypto-economy.com)

Public blockchains broadcast every pending transaction, which is precisely what let bots react within three minutes of an 11-year-old wallet stirring. That transparency is core to how Ethereum works, but it also means dormant fortunes become visible targets the moment they move, with no delay to react beyond the seconds a user takes to double check an address. The real tension is between a ledger that must stay open and users who increasingly need split-second vigilance to avoid automated predators feeding off that openness.

Whether this case becomes a template or a one-off depends on how other Genesis-era holders respond when their own wallets resurface. Blockchain analysts flagged this transfer precisely because 2015-origin addresses are rare and carry disproportionate value, so each future reactivation will be watched for the same pairing of a test payment followed by scam attempts. The figure to track is simple: how many of the next dormant-wallet movements avoid the trap, versus how many don't.

Market reaction i

EthereumETH the event is about this asset

Ethereum fell 1.4% in the 4 hours after the first headline, after falling 0.4% in the 2 hours before.

$2,115 price at the headline
-0.4% 2 h before
-1.4% 4 h after
-3.5% 12 h after
First headline

48 prices, one every 30 minutes

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Nov 10 07:01
+5 min
Nov 10 07:05
Crypto Briefing context
Its angle: transactions, especially, heightened
+6 h 41 m
Nov 10 13:42
Bitcoinist context
Its angle: cryptocurrency, approximately, significantly; with quotes
+7 h
Nov 10 14:00
Crypto Economy context
Its angle: destination, accumulated, contaminate
+7 h 8 m
Nov 10 14:08
CR Cryptopolitan context
Its angle: disregarding, 0x1321beb8, lookalikes; with quotes

Has this happened before?

WhenWhat happenedFigure
2 days ago Ethereum Whales Buy the Dip as ETH Crumbles 15% in 5 Days event 1 actors in common · 2 news media
6 days ago Franklin Templeton Hits $1.1 Billion on Stellar (XLM), Leaving XRP Ledger Far Behind event 1 actors in common · 2 news media
8 days ago No Ethereum (ETH)? Exchanges Report Substantial Outflows event 1 actors in common · 4 news media
9 days ago TRON overtakes Ethereum in USDT as stablecoin supply hits $92.25B event 1 actors in common · 2 news media
9 days ago Solana faces Binance hacker’s $95.9M swap – Can SOL defend $90? event 1 actors in common · 3 news media