Bofur Capital Loses ~$2M in Address Poisoning Attack

Address poisoning exploits a workflow problem rather than a code flaw: it preys on copy-paste habits and transaction-history clutter, so even experienced desks can lose funds without any smart-contract failure. For firms managing client or fund capital, this keeps operational security — whitelisting, verification steps, signer discipline — as material as market risk. The open question is whether such losses push more treasury and RWA operations toward pre-approved address registries or multi-party confirmation, or whether the industry keeps absorbing these incidents as a cost of doing business.