The address labeled Bofur Capital lost $2M due to an address poisoning attack after withdrawing from Compound
The address labeled Bofur Capital lost $2M due to an address poisoning attack after withdrawing from Compound. A phisher sent a small USDC transaction to spoof the address, and the victim mistakenly copied the wrong address, leading to the drain. The stolen funds were swapped to 2M DAI.
- Estimated loss
- $2,000,000
- Protocols
- Compound
- Confidence
- High
- First seen
- 22 Aug 2026, 02:30 UTC